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Another State Looks Offshore 


Signing of low bidder faces scrutiny in W: ash. 


MORE ONLINE 

Union urges IBM workers to fight plan to 

move jobs offshore: 43581 

outsourcing issues: 
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running over budget, and an 
internal state document writ- 
ten in October warns of a “sig- 





BY PATRICK THIBODEAU 
A decision by the Washington 
State Health Care Authority to | 
use offshore labor for a major | 
IT project was based in part 
on some pretty simple arith- 
metic: The contractor’s bid | 
was about $3 million below | 
the next lowest bid. 

But the project hasn’t | 
worked out as planned. It’s 





LubeuUecteesedUUeccelbaeddocetatectestaclallaal 

SBXBGIF TERESRERRSRERSSSCAR-RT LOT#SB-O52 

#0234939/CB/O8 CH2063518 881 11533 
57 


NEWSPAPER 


PROQUEST 
PO BOX 984 
ANN ARBOR MI 48106-8984 


25-6 





nificant risk” that it won’t 
meet the agency’s require- 
ments. The project has also 
prompted state legislation that 
would effectively bar state 
agencies from future use of 
offshore contractors. 

“J don’t think that Washing- 
ton state tax dollars should be 
used to create jobs overseas, 
when we've got skilled work- 
ers here,” said State Rep. Zack 
Hudgins, a Democrat. When 
the Washington Legislature 
reconvenes next month, Hud- 
gins plans to introduce a bill 
that would block the state 
from sending work offshore. 

“T think we may save money 
in the short term by going to 
our lowest bidder,” Hudgins 
said. “But in the long term, we 
undermine our communities, 
our job base, our tax base.” 

Offshore Labor, page 49 





IT Vendors Cast 
Votes With Their 
Checkbooks 


Associations hope to avoid regulation; five 
key lawmakers benefit from industry funding 





BY DAN VERTON 

WASHINGTON 

With the Democratic Party a 
month from the first caucus in 
the presidential nominating 
process, the high-tech indus- 
try has cast a vote that so far 
favors President George W. 


| Bush, along with a select arin 
group of influential i | 


members of Congress. 
Threatened by the 
specter of more regula- 
tion and higher taxes, IT 
hardware and software 
manufacturers and the indus- 
try associations that iobby for 
them in Washington have do- 
nated nearly as much money 
to the Bush campaign as to all 
of the Democratic candidates 
combined. Political action 
committees in the IT sector 


this year have given Bush 
more than $1.2 million, com- 
pared with $387,886 for Demo- 
cratic front-runner Howard 
Dean, according to the most 
recent filings with the Federal 
Election Commission. 

Of the $113 million donated 
since 1998 to political 
candidates for federal 
office by individuals, 
companies and associa- 
tions in the IT sector, 
roughly half has gone to 
Democrats and half to 
Republicans. However, a Com- 


| puterworld review of FEC data 


shows that two large vendor 
associations and the prom- 
inent member companies of 
other influential associations 
have given more than $380,000 
IT Lobbying, page 16 


EMC Shapes Plans for VMware 


Says it will integrate 
server Virtualization 
technology next year 


BY PATRICK THIBODEAU 
AND LUCAS MEARIAN 


bike Des cials said last 
week that the 
company will 

§ move quickly to | 
release prod- 
ucts that incor- 

=a porate VMware 
Inc.’s server virtualization 
technology, once EMC’s $635 


EMC Corp. offi- | 


million acquisition of VMware 
is completed early next year. 

The officials also stressed 
that users won't have to buy 
EMC products to take advan- 
tage of VMware’s technology 
and pledged to increase re- 
search and development at the 
acquired company. 

The possibilities for both 
vendors’ product lines drew 
some users’ interest. 

Robert Stevenson, a tech- 
nology strategist at The 
Weather Channel Inc. in At- 
lanta, helps oversee about 

EMC/VMware, page 12 
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ae — Optimizes performance by self-managing: On demand. 


The human body has an uncanny ability to monitor and adjust 
on demand, as do IBM TotalStorage® products. Select IBM TotalStorage 
products have powerful autonomic capabilities: they proactively 
monitor and maintain their own health. Which can oD maximize 
uptime. Which can help your bottom line. To learn more, download 
our latest white paper on autonomic capabilities from the URL below 


IBM TotalStorage: storage foron demand business. 
Can you see it? See it at ibm.com/totalstorage/uptime 
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The right management should do more than just protect. 
It should also enable. 
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With eTrust security management software, your information isn't just safeguarded from internal and external threats. 
We provide authorized customers, partners, and employees with appropriate access that can help your business grow. 


In addition to securing data, eTrust also provides a single view of your security environment, so you can make real-time 


decisions based on comprehensive information. If you're looking for ways to minimize risk while maximizing your 
potential, or to get a white paper, go to ca.com/security. 
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Sun plans to broaden its IT 
services portfolio through 
internal offerings and third- 
party deals. 


Delta Air Lines says a test of 
RFID technology for baggage 
handling was a success. But 
funding is an issue. 


PeopleSoft releases connec- 
tors that tie modules in its 
applications with software it 
acquired when it purchased 
J.D. Edwards. 


HP is testing 2.5-in. disk 
drives for use in its ProLiant 
servers next year. 


Saddam Hussein’s capture 
didn’t really test the IT capa- 
bilities of the “digitized” unit 
involved. 


Rival vendors join forces to 
create a standard user inter- 
face for managing servers. 


Microsoft delays BizTalk 
Server’s ship date until early 
next year. But the packaging 
and pricing of the third major 
release of the software won't 


change from the previous one’s. 


THE TOP 10 STORIES OF 2003, 


: 28 Q&A: Digging Into Docu- 
ments. Ronen Feldman, presi- 
dent of ClearForest, says text 
mining can transform busi- 
ness research. 


30 Hands On Reviews: Taming 
the Rattle and Hum. Learn 
how to reduce the decibel 
levels in your home office. 


32 Future Watch: Digital De- 
fense. Researchers are learn- 
ing to make systems more 
adaptive and resilient, even in 
the face of unknown attacks. 


33 Security Manager’s Journal: 
Snort Enhancements Sup- 
press IDS Headaches. Math- 
ias Thurman finds that new 
features in Snort intrusion- 
detection software dramati- 
cally reduce false alarms. 
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35 Too Much to Do. Five CIOs 
talk about how they must 
prioritize new legislative 
mandates and integrate them 
with their regular IT projects. 


40 Q&A: BI: Last to Leave. 
Data management consultant 
William McKnight discusses 
why business intelligence 
is a laggard when it comes 
to outsourcing IT projects 
overseas. 
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42 Q&A: Newsmaker. CIO Larry 
Buettner wants to use data 
marts and wireless IT to bet- 
ter serve the corporate cus- 
tomers of fleet management 
company Wheels Inc. 
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8 On the Mark: Mark Hall 
learns that some IT shops are 
squandering a chance to get 
some of Microsoft’s money. 
And he thinks high-tech IPOs 
will be fashionable in 2004. 


20 Maryfran Johnson suspects 
that IT’s priorities for next 
year will get scrambled by 
lawyers, auditors and worried 
boards of directors. 


20 Pimm Fox visits Europe and 
learns from a local expert 
what companies there look for 
in their senior IT leaders. 


Michael Gartenberg drops 
a few surprises into his 10 
predictions for 2004. 


34 Nicholas Petreley reinter- 
prets a classic Christmas 
poem to reflect the year’s 
leading IT trend. 


42 Peer to Peers: Norbert J. 
Kubilus spells out the impor- 
tance of succession planning 
and offers tips for developing 
your company’s next CIO. 


50 Frankly Speaking: Frank 
Hayes doesn’t think 2004 will 
be a banner year for utility 
computing or Linux desktops. 
He says security, RFID and 
staff retention may be the 
year’s top IT issues. 
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SECURITY: More creative forms of 
spam, stronger desktop management 
controls and a major incident involv- 
ing the disclosure of corporate infor- 
mation through instant messaging or a 
Wi-Fi breach are among Peter H. Gre- 
gory’s predictions for the coming year. 


Death of the 

HARDWARE: Expect to see full “micro- 

systems” stamped on a single chip and 

more micropayments on the Internet, 

says Sun CTO Greg Papadopoulos. 
QuickLink 43142 


DEVELOPMENT: Johanna Rothman may 
have an opaque crystal ball, but she of- 


fers lots of insights for improving soft- 
ware development. @ QuickLink 43592 


Will D Theft Be 
The Christmas Grinch? 

PRIVACY: Don’t believe all of the hype about 
identify theft, says columnist Jay Cline. But 
keep a shredder handy. @ QuickLink 43632 


ing and Securing 
Your Mobile Workforce 


ae Cisco CIO Brad Boston 
offers tips on handling the inevitable prolif- 
eration of wireless mobile devices in your 
company. @ QuickLink 43471 
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IBM, French Bank 
Set Up IT Venture 


IBM and BNP Paribas said they’re 
forming a joint venture that will 


manage the Paris-based bank’s IT | 


infrastructure. The deal, valued at 
up to $1.2 billion over five years, 
covers the bank’s mainframes, 
7,000 servers, and storage de- 
vices with a total capacity of 
400TB. Both companies will con- 
tribute workers to the joint ven- 
ture, which will start with about 
450 employees. 
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Microsoft Hit With 
Another Lawsuit 


Seattle-based RealNetworks Inc. 
filed a lawsuit alleging that Mi- 
crosoft Corp. has illegally tried to 
control the market for digital me- 
dia technology. The suit, filed in 
federal court in San Jose, claims 
that Microsoft has forced PC 
makers to include its Windows 
Media Player on systems and re- 
stricted how rival software can be 
installed. In response, Microsoft 
said there is “vibrant competi- 
tion” in the digital media market. 


Citrix Buys Tools 
For Accessing PCs 


Citrix Systems Inc. said it’s buy- 
ing Expertcity Inc., a Santa Bar- 
bara, Calif.-based vendor of soft- 
ware that lets end users access 
remote PCs via the Web. Exert- 
city’s technology is primarily used 
by consumers and small busi- 
nesses, but Fort Lauderdale, Fia.- 
based Citrix hopes to make the 
software more appealing to cor- 
porate users. The purchase price 
is $225 million in cash and stock. 


Red Hat Reports 
Profit, Acquisition 
Red Hat Inc. reported a $4.1 mil- 
lion profit on $33.1 million in rev- 
enue for its third quarter, which 
ended Nov. 30. Revenue was up 
36% year over year. Red Hat also 
said it will buy Sistina Software 
Inc., a Minneapolis vendor of 
storage tools for Linux systems. 
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Sun ‘Tries to Boost 
Its IT Services Arm 


Ties utility computing and managed 
services, moves to broaden its offerings 





BY CRAIG STEDMAN 
BURLINGTON, MASS 
UN MICROSYSTEMS INC. 
executives last week 
outlined steps the 
company’s IT services 


| unit is taking to make itself 


more competitive with the 
services operations at IBM 
and Hewlett-Packard Co. 
During a press briefing at 
Sun’s facilities here, company 
officials said Sun Services re- 


| cently combined its managed 


services and utility computing 
operations under one execu- 
tive. They said they hope to 
use utility computing installa- 
tions to boost the adoption of 
data center services built 
around Sun’s NI resource 
management technology. 

Sun also plans to expand its 
IT services offerings into ar- 
eas such as managed network 
security and analysis of soft- 
ware code for corporate users. 
Patricia Sueltz, executive vice 


| president of the revamped Sun 


Services, gave the unit’s cur- 
rent services portfolio a grade 
of C. “We’ve got a ways to go,” 
she said. 

In addition, Sun Services 
has begun working more 
closely with the company’s 
sales force to prepare bids and 
design system installations for 
customers. Sueltz said that’s 
part of a strategy to make the 
organization more of a general 


| IT contractor, along the lines 


of what IBM and HP do. 


| Another Approach 


However, Sun is taking a much 
different approach. The com- 
pany began a managed ser- 
vices marketing push last 
April under the direction of 
Sueltz, who had taken over at 
Sun Services 18 months ago 
[QuickLink 34945], and its ser- 
vices workforce is smaller 
than those of IBM and HP. As 
a result, Sun is focusing on re- 





| mote management capabilities 


and contracts that stop short 
of full IT outsourcing deals. 
“We’re really going to show 
how you can use technology 
to run a services business,” 
Sueltz said, adding that Sun 
users will retain control of 
their IT systems and staffs. 
Sun’s approach suits Justin 
Shaffer, director of operations 
at MLB Advanced Media LP, a 
New York-based company that 
runs the Internet operations of 
Major League Baseball and all 
of its teams. MLB Advanced 
Media uses Sun’s hardware 
and Web server software to 
run its Web sites, and Shaffer’s 
staff is working with Sun Ser- 





TECHNOLOGY PLANS 


The company will use both 
internal offerings and third- 
party deals to increa: f 


STM EUR Cr OUR Riel i art] 
development kit during the 
second half of 2004 to make it 
(syets} (1m ON BI CLelealie ICRA s)Al Celt 
management tools from other 
vendors with its N1 technology 


vices on a variety of technical 
improvement projects. 

“We retain the architectural 
control, but we almost have an 
extra set of eyes and hands,” 
Shaffer said. He said he prefers 


that kind of relationship to one | 





www.computerworld.com 


in which a company such as 
IBM or HP would take over 
management of his systems. “I 
probably wouldn’t get fired for 
choosing them,” he said. “But I 
don’t think I'd have the chance 
to do some of the things as 
quickly as we do now.” 
However, IBM and HP also 
give users the option of retain- 
ing control of their systems, 
said Forrester Research Inc. 
analyst Frank Gillett. “Every- 
body offers managed ser- 
vices,” he said. “It’s just that in 
Sun’s case, if somebody wants 
to do outsourcing, they have 
to turn to one of its partners.” 
Judith Hurwitz, president of 
Hurwitz & Associates, said 
Sueltz has made progress in 
converting Sun Services from 
a hardware maintenance orga- 
nization to “a true consulting- 
services business.” But Sun 
still can’t match the breadth of 
services capabilities that users 
can get from IBM and HP, she 
added, saying, “Right now, I 
see them as just being in a dif- 
ferent league.” @ 43645 


Services Chief Says Her Unit ls Making Progress 


Since she became executive 
vice president of Sun Services 
18 months ago, Patricia Sueltz 
has replaced most of the unit's 
management team, cut its work- 
force and redirected it toward 
higher-level consulting and man- 
aged services offerings. Sueltz 
last week spoke with Computer- 
world's Craig Stedman about the 
current state of affairs at 

Sun Services. Excerpts 

follow. 


At a briefing last De- 
cember, you detailed a 

lot of changes you were 
making, both internally 

and in the kind of ser- 

vices you offer. Are you 
where you want to be now? 
| tend to be a perfectionist, so 
I'm not where | want to be. But 
we have made a lot of progress. 
We've changed nine of our 11 
executive staff members. In the 
fiscal year ending in June, we 
came in with $3.641 billion 

in revenue, up about 7% year 
over year. | can’t break out our 


profit, but let's just say we grew 
profit 19%. In the quarter that 
ended in September, we were at 
36.7% of Sun's revenue. A year 
ago, it was about 27%. 


Is that the kind of percentage 
you want to see? It's good and 
bad news, because in the end, 
Sun is really not in the services 
business. We're a sys- 
tems company, and my 
job is to support and 
amplify the software and 
hardware we sell. | think 
in a healthy business en- 
vironment, [that per- 
centage] should be 
somewhere in the high 
20s or low 30s. But in 
tough times, I’m glad to take up 
some of the slack. 


As part of your managed 
services push, have you tried 
to win business from compa- 
nies that don’t have any Sun 
equipment? | haven't gone that 
far. I'm not an arms dealer. But 
we do a lot of business with not- 


Sun-only customers, because 
the world isn't homogeneous. 
The way | solve problems, how- 
ever, is not to be all things to all 
people. We do that not by throw- 
ing a lot of bodies at problems, 
but by utilizing technology and 
teaming up [with partners]. 


Your strategy stops short of 
outsourcing and leaves users 
in control of their IT systems 
and staffs. Is that a way of 
making lemonade out of the 
fact that you don’t have as 
many services workers as 
IBM and HP do? | don't see it 
that way. | think of it as being 


- counterintuitive to just throwing 
: bodies at a problem. We're say- 


ing, “Let's put our experts in but 


: leave the users in charge.” | 
- think we started with a lot more 


sugar than lemons on that one. 


: To read the full interview with Sueltz, 
» go to our Web site: 


QuickLink 43633 
www.computerworld.com 
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Delta Says Radio Frequency ID 
Devices Pass First Bag-Tag Test 


lechnology scores 
tracking, but costs 
BY BOB BREWIN 

Delta Air Lines Inc. last week 
said it got accuracy levels 
ranging from 96.7% to 99.9% 
during a test in which it used 
radio frequency identification 
(RFID) tags to track 40,000 
pieces of luggage from check- 
in to loading on planes. 

The success rate of the 
RFID technology was far bet- 
ter than the 80% to 85% accu- 
racy rate that’s typically pro- 
vided by bar code scanners, 
according to officials at Delta 
and the IT vendors that took 
part in the test. Pat Rary, man- 
ager of baggage strategy at At- 
lanta-based Delta, said the tri- 
al run at the airport in Jack- 
sonville, Fla., aiso met a key 
requirement: It was invisible 
to the airline’s check-in agents 
and required no new training. 

Delta spokesman Reid Davis 
warned that the airline and 
others in the cash-strapped in- 
dustry will likely need to pro- 
ceed slowly with any system- 
wide rollouts of RFID tags. 
Delta operates at 81] major air- 
ports worldwide, and Davis 
said equipping all of them 
with RFID bag-sorting sys- 
tems would require “a signifi- 
cant capital expenditure.” 

Nonetheless, Delta plans to 
continue exploring the tech- 
nology. Rary said it has re- 
ceived tentative approval from 
the Transportation Security 
Administration to run another 
test in January using RFID 
tags made by Alien Technolo- 
gy Corp. in Morgan Hill, Calif. 
The first test, done in con- 
junction with the TSA from 
Oct. 23 through Nov. 15, in- 
volved tags supplied by 
Matrics Inc. in Columbia, Md., 
and SCS Corp. in San Diego. 

Rary said the second one 
will give Delta a chance to try 
different methods of deploy- 
ing tags, including the use of 
better printers to write bag- 
routing data onto RFID chips 





high on luggage 
slow airline's plans 


that are embedded in standard 
bar code labels. The airline’s 
goal is to develop a bag-track- 
ing system with a “zero mis- 
handling rate,” he added. 


High Success Rates 

Phil Heacock, director of ad- 
vanced sortation technology 
in the Louisville, Ky., office of 
FKI Logistex Group Ltd., said 
that with one exception, the 
RFID bag-tracking system in 
Jacksonville provided read 
rates well above 99%. Scan- 
ners on the bag belts inside 
the terminal averaged 99.8%, 
and the ones on aircraft belt 
loaders had a success rate of 


99.9%, Heacock said. FKI 


| Logistex Group served as sys- 
| tems integrator for the test. 


RFID scanners mounted on 


| universal load devices, which 


automatically load containers 


| of bags on to planes, averaged 


| 96.7% accuracy. Heacock said 

| the containers are made of 

| metal, which impedes radio 

| signals. Coating their interiors 
| with a material that will better 
| reflect radio waves could help 


improve accuracy, he added. 
Heacock said that Delta 
modified a standard bag-tag 


| printer to capture data nor- 
| mally used to print bar codes. 


The information was then 


| written on to RFID devices in- 
| serted into standard luggage 

| tags. RFID readers tracked the 
| progress of items through 


PeopleSoft Ties Its Apps 
To J.D. Edwards’ Software 


Connectors link 
product lines, but 
users May need to 
buy new licenses 
BY MARC L. SONGINI 

Looking to deliver on the 
promised benefits of its acqui- 
sition of J.D. Edwards & Co., 
PeopleSoft Inc. last week re- 
leased integration links that 
are designed to let users ex- 
ploit functionality from both 
companies’ lines of business 
applications. 

But users will have to buy 
new application licenses to 
take advantage of the pack- 
aged connectors if they don’t 
already run software from 
both PeopleSoft and J.D. Ed- 
wards. PeopleSoft said the 
next step in its integration 
plan is to transfer technology 
between the product lines, but 
it didn’t disclose a schedule 
for doing so. 

The licensing issues are a 
concern for Irving Tyler, CIO 


at Conshohocken, Pa.-based 


| Quaker Chemical Corp., which 


uses J.D. Edwards software. 


| The integration work done by 
| PeopleSoft is a good thing, 

| Tyler said. “However, it’s con- 
| fusing,” he added. “Things are 





all moving about, and we’re 


| not sure what products are 


which and how they apply to 
the licenses we already have.” 
Tyler said he will have to 
meet with PeopleSoft to get a 
better grasp of what’s avail- 


More Technology 








OR scans a bag with an RFID tag in Jacksonville, Fla. 


the airport’s bag-handling sys- | 
tem, including the explosives- 
detection machines that are 
operated by the TSA. 

The aircraft loaders were 
also equipped with RFID read- | 
ers and were hard-wired to 
ruggedized computers, which 


| used 802.11b wireless LANs to 


transmit data to Delta’s back- 


| end baggage systems. 


Getting the funding needed 


' to install RFID bag-tracking 


| able from an integration 


standpoint, how it can be used 
and the software licensing 
ramifications. 

Pleasanton, Calif.-based 
PeopleSoft initially is offering 
a set of seven connectors that 
integrate specific modules in 
its PeopleSoft Enterprise and 
EnterpriseOne application 
suites, which were known as 
PeopleSoft 8 and J.D. Edwards 
5, respectively, prior to the 
July merger. 

For example, PeopleSoft has 
linked its strategic sourcing 
software to the procurement 
application developed by J.D. 
Edwards. That means Enter- 
priseOne users who have de- 
ployed the procurement tools 
at various manufacturing 


plants now can aggregate their | 


purchases of materials and 
supplies on a global basis, said 
Rick Bergquist, PeopleSoft’s 
chief technology officer. 

The integration roilout 
hews to a road map that Peo- 
pleSoft officials laid out in 
September [QuickLink 41094]. 
Other connectors tie together 
order processing and invento- 
ry management applications 
as well as finance and human 
resources modules. 


MORE USERS — 


| UPS, American Express are also working 





systems can be a challenge 
now, said Gene Alvarez, an an- 


| alyst at Meta Group Inc. But 


he added that he expects the 
technology to eventually be- 
come a standard throughout 


the airline industry. @ 43686 


with RFID technology 
QuickLink 43672 
www.computerworld.com 


In addition to the links, Peo- 
pleSoft said users can consoli- 
date data from EnterpriseOne 


| and J.D. Edwards’ older World 
| applications into its data ware- 
| housing software and use its 


Enterprise Performance Man- 


| agement tools to analyze the 


information. 
PeopleSoft is taking some 


good first steps and appears to 
be picking up the pace of its 


integration efforts, said Barry 
Wilderman, an analyst at Meta 


| Group Inc. In particular, he 
| cited PeopleSoft’s support for 
| warehousing data from all of 


its business application suites. 
But Wilderman cautioned 

that different metadata for- 
matting approaches may pre- 
vent J.D. Edwards users from 
taking full advantage of Peo- 
pleSoft’s analytic applications. 
He also advised IT managers 


| to work with PeopleSoft to 


find out how seamless the ap- 
plication-to-application inte- 


gration is. @ 43655 


PEOPLESOFT MUST PAY 


Arbitrators tell PeopleSoft to pay a dis- 

gruntled J.D. Edwards customer more than 

$1.8 million over a failed software rollout 
QuickLink 43664 
www.computerworld.com 





Kodak Shifts CIO, 
Names IT Chief 


Eastman Kodak Co. named Mark 
Gulling, formerly its ClO, to head 
a new global shared-services unit 
that will consolidate operations 
such as call centers and parts of 
the company’s finance and hu- 
man resources departments. Kim 
VanGelder, who was director of 
IT at Kodak’s digital and film 
imaging systems unit, will be ClO 
and report to CEO Daniel Carp. 


EDS Names Former 
Oi C10 as Exec VP 
Electronic Data Systems Corp. 
has hired David Clementz, who 
retired as ClO of ChevronTexaco 
Corp. in July, to manage its out- 
sourcing data centers and the fa- 
cilities where it develops soft- 
ware for its IT services cus- 
tomers. As executive vice presi- 
dent of service delivery, Clem- 
entz will head one of the three 
operating units that EDS created 
in a reorganization last June. 


ING U.S. Outsources 
Tech Ops to IBM 


ING U.S. Financial Services, an 
Atlanta-based unit of ING Groep 
NV, said it has signed a seven- 
year, $600 million outsourcing 
contract with IBM. The deal calls 
for IBM to manage ING U.S.’s IT 
infrastructure, including its data 
centers, networks and help desk 
operations. ING said that about 
300 of its IT workers will shift to 
IBM as part of a transition that 
began last week and is due to be 
completed in April. 


Short Takes 


IBM announced that it has ac- 
quired GREEN PASTURE SOFT- 
WARE INC., a developer of docu- 
ment management software in 
Corvallis, Ore., for an undisclosed 
price. . . . Linux creator LINUS 
TORVALDS said in an e-mail mes- 
sage to the Linux-kernel mailing 
list that Version 2.6 of the open- 
source operating system’s kernel 
is ready for production use. 
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MARK HALL #ON THE MARK 


IT Lets Microsoft Pocket 
Ill-gotten Gains... 


... by not filing for product vouchers from the settlements won in 
states’ courts. In California, for example, up to 15 million businesses, 
organizations and individuals qualify, but a mere 300,000 have applied so 
far to get the reimbursement, says Howard Yellen, CEO of Settlement 
Recovery Center LLC in San Francisco. Companies that negotiated 
contracts directly with Microsoft are excluded from the agreement. 


But most companies bought through 
manufacturers, value-added resellers or 
down at the local Office Depot, and they 
all qualify. The settlement [QuickLink 
40158] covers Microsoft operating sys- 
tems and applications sold from 1995 
through 2001. While Yellen says he can 
understand that an individual might not 
want to dig through his files to find a re- 
ceipt for his Windows 95 upgrade, which 
the courts figure Microsoft overpriced by 
$29, it’s just plain silly for “IT to sit on 
their hands” when they can collect. And 
big, in some cases. Yellen estimates that 
companies that barely upgraded at all 
during the seven-year period can still 
average $100 per user. For those that 
went through a steady upgrade process, 
it might be as high as $250 per user. 
The average, he says, 
runs about $165. The 
vouchers are good for 
most high-tech gear, 
not just more Microsoft 
products. Routers, Mac- 
intoshes, Sun worksta- 
tions and even Linux 
laptops — you can go 
shopping. But the right 
to file a claim expires on 
March 15, giving you 
less than three months 


Tee Mera TL 


environments. 





Tibia niet 


in Princeton, N.J., to port its Logidex 
developer tool for application life- 
Pa PUEUE Las) Lal \ iy 
NetWeaver development framework. 
Logidex already runs in the Visual 
Studio .Net and Eclipse programming 


to get in line. Microsoft doesn’t believe 


| you'll bother. That’s why the company 


has allocated only about $800 million to 
cover the California agreement, and it’s 
doubtful that all of it will be spent. Why? 
“IT managers think it’s a pain in the 
neck,” explains Yellen. Naturally, his 
company is willing to come to your res- 
cue, but as Humphrey Bogart’s cynical Rick 
told Peter Lorre’s character in Casablanca, 
“For a price, Ugarte, for a price.” In 
Yellen’s case, it’s 30%, but presumably 
without the dead German couriers. What 
that 30% gets you is a guarantee that 
your claim will be filed on time and cor- 
rectly. And Settlement Recovery Center 
doesn’t get a nickel unless, and until, you 
do. Even if you don’t use its services, 
Yellen says you had better get off the 
dime. “It’s nuts not 
file a claim,” he con- 
cludes. “It’s free mon- 
ey.” # While I’m on 
the topic of money, 
Silicon Valley start- 
ups think next year 
might be a good time to 
cash in. Salesforce.com 
Inc. has filed SEC 
documents stating its 
intent to go public 
next year. The San 





www.computerworld.com 


Francisco-based online CRM provider 
may be the second-most-anticipated ini- 
tial public offering in 2004 behind Moun- 
tain View, Calif.-based Google Inc., 
which is rumored to be considering of- 
fering its stock directly to buyers over 
the Internet. Another IPO in the new 
year may come from security appliance 
maker ServGate Technologies Inc. in 
nearby Milpitas, Calif. " No word on 
whether Covalent Technologies Inc. 
thinks going public is in the cards for 
2004, but the San Francisco company has 
found a way to make nice bundles of 
money — selling proprietary software to 
manage open-scurce technologies. Market- 
ing Vice President Jim Zemlin says 130 of 
the Fortune 500 so far have bought the 
Covalent Application Manager, which 
uses lightweight agents to report on the 
health of everything from Linux and 
MySQL to JBoss and Apache. Covalent 
will add Postgres, a popular open-source 
database, in the first half of next year, 
and it’s also taking a close look at adding 
support for Bricolage, an open-source 
content management product. Zemlin 
says he’s bullish about the near future 
because “it’s only after IT builds out all 
the open-source that they realize it’s got 
to be managed.’ D’oh! ® Jeff Silva, co- 
founder and vice president of Maxxan 
Systems Inc. in|San Jose, says there are 
two hot areas in SAN management at the mo- 
ment: data replication and virtual tape li- 
braries. And that’s just what Maxxan will 
offer its SAN management product users 
beginning this week with Version 4.0 of 
IPStor, which it resells from from Falcon- 
Stor Software Inc. in Melville, N-Y. Silva 
says data replication demand is being 
driven by companies under the Sarbanes- 
Oxley gun; the-virtual tape libraries offer 
a way to transition data from disk to 
“tape” without losing the speed of data 
recovery that disk-to-disk gives you. And 
you still get to use your current tape- 
backup program. @ 43660 





‘HP Will Add 2.5-in. Drives to ProLiant Line 


the idea that smaller drives 
could save space in his ever- 
growing data center. But, Mor- 





BY LUCAS MEARIAN 
Hewiett-Packard Co. plans to 
put 2.5-in. disk drives with en- 
terprise-class features in its 
ProLiant servers next year and 
later will add the space-saving 
technology to its disk subsys- 


tems and arrays. 


Fujitsu Computer Products 
of America Inc. last week an- 
nounced that HP has started 


| testing its 2.5-in. drives, which 


use the Serial Attached SCSI 
interconnect and support data 





transfer rates of up to 300MB/ 
sec. In addition, Seagate Tech- 
nology LLC said it will deliver 
2.5-in. drives to HP and other 
systems vendors during the 
first half of 2004. 

HP will be able to put three 
of the new drives in the same 
amount of space that’s now 
occupied by one 3.5-in. model, 
said Jeff Jenkins, vice presi- 
dent of server storage and in- 
frastructure. That should let 
HP increase storage capacity 





and data throughput in servers 
and disk arrays while reducing 
the size of the boxes, he said. 
The 2.5-in. technology is 
expected to debut in the Pro- 
Liant line in the second half of 
2004, Jenkins said. HP then 
plans to roll out muitiple-disk 
enclosures and modular arrays 
using the smaller drives in 
2005 and 2006, respectively. 
Jay Morgan, storage manag- 
er at Safelite Autoglass Inc. in 
Columbus, Ohio, said he likes 





gan added, he’s concerned that 
stacking servers with multiple 
2.5-in. drives might create hot 
spots in the data center and 
force him to reconsider the 
amount of weight the floor 
needs to support. 

IDC analyst Dave Reinsel 
predicted that 2.5-inch drives 
will account for 2% of the en- 
terprise-class drive market next 
year. The switch to the smaller 
drives “will be a fairly gradual 
thing,” he said. @ 43675 





Find Out the Secrets of Free White papers! find ut the Secrets of 
Real-time Infrastructure! 


Real-time Infrastructure! 


CI YES! ; 
NO, 
Just mail or fax this completed 
yr contact APC to 
View the Deloitte case study 
video and ( 
papers 


|_| Ves! Send me more information via e-mail and sign me up for APC PowerNews e-mail newsletter. Key Code 0187y 


Key Code iti 
, What type of availability solution do you need? 
http://promo.apc.com 0187y UPS ISNA eae PS 1 \ 


(888) 289-APCC x2997 © FAX: (401) 788-2797 


Arc You are (check 1): (1) Home 
Gov't 


Legendary Reliability® 





ae 


BUSINESS REPLY MAIL 


POSTAGE WILL BE PAID BY ADDRESSEE 


Arc 


ATTENTION CRC: 0187y 
Department: B 

132 FAIRGROUNDS ROAD 

PO BOX 278 

WEST KINGSTON RI 02892-9920 


WNasccelalbcdadsdecsedelDadeabstesebelDDvctelial 


NO POSTAGE 
NECESSARY 
IF MAILED 
IN THE 
UNITED STATES 


How to Contact APC 


Call: (888) 289-APCC 


use the extension on the reverse side 


Fax: (401) 788-2797 
Visit: http://promo.apc.com 


use the key code on the reverse side 


Arc 


Legendary Reliability® 





“Thanks to 
InfraStruXure, 
“a | NTR Gae ICs 
a OBST Cee TLE 

WMG 
Reuter and 
ee costs. 


Eric Ubels, GIO, and Guus Van Velzen, Principal Architect 





Deloitte 

actA and Fditors FTN eye) TT and price lead us 
en Bo eee to give InfraStruXure” a score 

“availability and monitoring features ie of 10 for value - a score neither one 
ToT ML eM Tee MOLY P4 10) OM ENR meee 
competition at half the cost...” Ts “Rack | re OCS MSC Um Malin im se ites 


STEAM Oils Mm Liles Cave ob 001-84 
InfoWorld 3/01/03 


Find Out 
the Secrets 


Tom Henderson, Global Test Alliance 


Network World 8/13/02 


Deloitte is only one of the latest partners benefiting 
from InfraStruXure’s open, adaptable, and integrated 
approach to data center design. 


InfraStrup Cure 


Open, adaptable and integrated 


Deloitte on architecture for on-demand 


The industry's only patent-pending, network-critical phys- 


ical infrastructure (NCPI), InfraStruXure significantly 
decreases the total cost of ownership through: 


Accelerated Speed of Deployment 
Electrical/physical modularity allows for rapid 
installation with minimal engineering. 


Minimized Human Error 

Simplicity of design and intelligent modules increase 
system availability by mitigating 

human error - the #1 cause of downtime 


Quick Fault Recovery 
Compartmentalize potential failures with 
intelligent, maintainable modules 


Modularity for Ease of Growth 
Pay as you grow and redeploy modular 
components as needed 


Find out how you can benefit from InfraStruXure’s 
innovative architecture. Visit us today at www.apce.com 


InfraStruXure” AIR 


“APC had the plan of building air conditioning systems 

in the rack. In a traditional data center, you always have 
racks which are totally filled with CPUs and which become 
very hot. Then you have racks which are not deployed at all 
To manage the energy, the warmth and the consumption of 
electricity in those racks, we believe that with APC we 
have found the right solution.” 


network-critical physical infrastructure 


Deloitte on 
InfraStruXure” Benefits 
“We have also enhanced our 
security, systems stability 
optimization, time to market 
and office operations. 
With InfraStruXure™, 
you can get it right in one 
attempt.” 


ail: esupport@. 


of Real-time 
Infrastructure! 


View the Deloitte case 
study video. 

Download white papers 
of your choice on optimal 
real-time infrastructure. 


Visit http://promo.ape.com 
Enter Key Code 0187y 

Call 888-289-APCC x2997 
Fax 401-788-2797 


Arc 


Legendary Reliability 





10 COMPUTERWORLD December 22, 2003 


Army’s [IT U 
Despite Role in Sadd 


Success didn’t demonstrate ROI of 
spending on ‘digitized’ unit, experts say 





BY DAN VERTON 
WASHINGTON 
HE U.S. Army’s 4th 
Infantry Division — 
the first so-called 
digital division — 
may have played a key role in 
the capture of Saddam Hus- 
sein. But military officials and 
analysts last week credited 
low-tech preparations and hu- 
man intelligence for the oper- 
ation’s success. They said the 
ongoing Iraqi insurgency will 
be the real test of the Army’s 
IT investment strategy. 

Hussein’s capture came 
after repeated raids in and 
around Tikrit, Iraq, produced 
a wealth of information from 
captured Saddam loyalists, 
and it shouldn’t be seen as 
justification for any of the 
IT systems deployed by the 
Army, said military analysts. 

“It would be foolish to justi- 
fy spending on the Army’s IT 
investment in digital divisions 
simply because of the 4th In- 
fantry Division’s role in the 
capture of Saddam,” said 
James Garrett, a military ana- 
lyst at Globalsecurity.org, a 
consulting firm in Alexandra, 
Va. “While the technology 
undoubtedly assisted in the 
command-and-control efforts 
of the operation, U.S. forces 
probably could have captured 
Saddam even if the equipment 
hadn’t been available.” 

“I strongly believe that 
[Hussein’s] capture was a 
combination of some very 
good and timely [human intel- 
ligence] on the ground and 
some persistence,” said Bill 
Crowell, a former director of 
the National Security Agency. 

Digitization efforts are real- 
ly designed to help troops vi- 
sualize where they and their 
fellow soldiers are positioned 
and to coordinate operations, 
Crowell said. In contrast, he 
said, “this operation was 





| against a specific target by a 


limited number of armored 
vehicles.” 

The Army started its multi- 
billion-dollar digitization ef- 
fort in the late 1990s. The 4th 
Infantry Division was selected 
as the proof-of-concept unit 
that would test and be the first 
to field a slew of new comput- 
erized command-and-control 
systems for its vehicles. 

The division didn’t see ma- 
jor combat in Iraq because 
it was deployed to Turkey, 
which didn’t allow the U.S. 
to launch operations from its 





NEWS 


soil. But analysts said that the 
current insurgency being 
waged against U.S. troops by 
Hussein loyalists and outside 
forces will continue to mea- 
sure the return on the Army’s 
IT investments. 

Central to the 4th Infantry 
Division’s capabilities is a $20 
billion program known as the 
Army Battle Command Sys- 
tem, a network of applications 
that provides real-time intelli- 
gence and weather data to 
computer terminals mounted 
in Army vehicles. 

The system provides graph- 
ic depictions of the locations 
of friendly forces and allows 
them to communicate with 
one another and with senior 





nit Still Untested, 
am Nab 


| commanders. It also displays 


the locations of known enemy 
units. 

John Hillen, general manag- 
er for defense and intelligence 
at Fairfax, Va.-based American 


SOCIATED PRESS 
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www.computerworld.com 


Management Systems Inc. and 
a former special operations 
soldier who served in Opera- 
tion Desert Storm, said while 
it’s true that the 4th Infantry 
Division’s new IT systems 
haven't been “battle-tested in 
the classic sense,” the Army 
can now assess operations 
during a phase of the war that 
has proved to be more per- 
ilous than the initial battle. 


@ 43681 


U.S. SOLDIERS in Baghdad watch a video following Saddam’s capture. 





Vendors Vow to Develop Common 
Interface for Server Management 


Rivals team up on 
proposed data 
center standard 


BY MATT HAMBLEN 
A group of top hardware and 
software vendors last week 
joined together to begin creat- 
ing a standard user interface 
for managing servers, a move 
that’s aimed at reducing the 
complexity and cost of admin- 
istering data center systems. 
The vendors, led by Dell 


| Inc., Hewlett-Packard Co., 


IBM and Intel Corp., an- 
nounced the creation of a 
working group within Distrib- 


; uted Management Task Force 


Inc. (DMTF), a Portland, Ore.- 
based organization that devel- 
oped the Common Informa- 
tion Model (CIM) and Web- 
Based Enterprise Management 
specifications. 

Other companies that are 
taking part in the effort in- 
clude Microsoft Corp., Oracle 
Corp., Sun Microsystems Inc., 
Advanced Micro Devices Inc. 





and OSA Technologies Inc. 

The working group plans 
to define a CIM-based com- 
mand-line interface that sys- 
tems administrators could use 
to locally and remotely man- 
age servers made by various 
vendors, said Winston Bum- 
pus, the DMTF’s president. 

Bumpus said rival server 
vendors currently offer their 
own management interfaces, 
requiring IT workers to man 
age each brand separately or 
write code that connects dif- 
ferent systems for manage- 
ment purposes. 

“Data centers have got racks 
of hardware, and it’s hard to 
manage this stuff,” he said. 
“We get the sense this is a real 
pain point for customers. ” 

Several IT managers agreed 
that server management can 
be a painful process. But they 


| said they’re skeptical about 


the working group’s plans, 
partly because data center 
management is inherently 
complex. 

“If this creates open stan- 


| dards, low costs and better 


management tools, then it has 
value, [but] I’m not convinced 
that this is the intent,” said 
Steve Bandrowczak, CIO at air 
freight carrier DHL World- 
wide Express Inc. in Scotts- 
dale, Ariz. Bandrowezak said 


Held its first face-to-face 
meetings last week and plans 
to complete an initial set of 
EL ee Oy meh 
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that when standards are creat- 
ed, individual vendors can 
“still drive very specific ver- 
sions that cause additional 
costs” for users. 

As described by the DMTF, 
the proposed interface stan- 
dard “sounds like somebody 
saying, ‘I’m against sin and in 
favor of motherhood.’ So how 
could you be against this if it 
comes to fruition?” said Philip 
Brody, chief technology offi- 
cer for the Clark County 
School District in Las Vegas. 
“Tt could make life easier for 
everybody, but you know — 
promises, promises. It sounds 
good and desirable, but the 
devil is in the details.” 

Both Brody and Bandrow- 
czak said their IT staffs have 
to manage many brands of 
servers. “It’s very complex to 
support multiple vendors with 
multiple storage-area network 
solutions and operating sys- 
tems,” Bandrowczak said. 

The new working group set 
a July 1 deadline for proposing 
its first specifications to the 
DMTF. Bumpus said the com- 
mon interface could eventual- 
ly be moved beyond servers to 
support networking devices 
such as switches and routers 
as well as PCs. @ 43661 





ADVERTISEMENT 


A Sound Storage Investment 


Yankee Group report finds users of VERITAS storage management software 
realize 3-year ROI of at least 200%. 


As storage-related expenses chew up ever-larger amounts of IT budgets, IT executives 
looking for ways to contain storage costs are increasingly turning to a heterogeneous 
management approach to help them rein in costs while improving performance. 


Key Heterogeneous Storage 
Management Benefits 


Percent of Respondents 


Decreases Number of Tools Needed ets 


Lowers Storage Management Costs 59% 


Enables Quicker sro 
Problem Resolution 45% 


Reduces Downtime 42% 


Provides Way to Replicate 38% 
Storage Best Practices 0 


0 10 2 30 40 


SOURCE: THE YANKEE GROUP, 
2003 SURVEY OF 289 STORAGE DECISION-MAKERS 


VERITAS delivers ROI 


3-year 
Customer ROI 


204% 
201% 
205%* 


SOURCE: THE YANKEE GROUP 


Payback 
period 


Government agency 15 months 


Service provider 11 months 


Financial services company 13 months* 


* Projected 


Download the full report 


The Yankee Group report, “Storage 
Management Return on Investment from 
Deploying VERITAS Software” is available 
free online. The report contains detailed financial 
analyses of the three case studies mentioned 
here, to help you make your own business case 
for heterogeneous backup software. 


Go to: www.veritas.com/offer 
and enter reference code 4391. 





That is but one of the key findings of a recent study 
: by The Yankee Group on storage management return : 
: on investment. The Yankee Group, a research firm 
: based in Boston, surveyed 289 IT executives at Global: 
: 2000 firms for the study, and also homed in on three : 
users of VERITAS Software storage management : 
: tools to determine total cost of ownership and RO! fig- 
: ures for their VERITAS deployments. i 
: The results present a rather dramatic case for the : 
: benefits of a heterogeneous storage management : 
: approach: A government agency saw an ROI of 204 : 
percent, a service provider realized an ROI of 201 per- : 
: cent and a financial services company expects a return 
of 205 percent over three years from their respective : 
: VERITAS storage management software deployments. : 
: The three companies saw a payback period of 15 : 
: months or less, according to a detailed financial analy- 
: sis Yankee Group conducted for each of the three cus- : 
: tomers. 


“All three sites also experienced a marked decrease 


: in the labor costs associated with managing their stor- 
age operations, reducing the time necessary to handle : 
: routine storage management tasks and vastly improv- : 
ing their ability to manage complex storage environ- : 
: ments,” according to the study, written by Yankee 
: Group senior analyst Jamie Gruener and sponsored by : 
: VERITAS. i 
: Storage budgets make up 10 percent to 20 percent of : 
: overall IT infrastructure budgets, prompting more com-_ : 


panies to establish separate storage groups within 


: their IT organizations, the study says. Some 48 per- 
cent of the companies Yankee Group surveyed have : 
: separate storage groups. With that kind of increased 3 
: emphasis on storage comes more scrutiny of storage : 
: costs and interest in measuring the value of storage : 
: investments. 
: Increasingly, enterprises are finding that the ability to : 
manage a multi-vendor storage environment from a : 
: common platform brings numerous benefits, including 
: improving productivity for IT administrators. The strate- : 
: gy also reduces vendor lock-in, enabling customers to : 
: select management software independently of their : 
: hardware platform, and to select the hardware that : 
i best fits each 
: Additionally, the strategy reduces downtime, cuts : 
: deployment time and streamlines management 
: processes, the report found. : 
: “The bottom line: it's easier and more cost-effective : 
: when one can manage storage in a heterogeneous : 
i manner,” the report states, noting the strategy is : 
: employed by more than 50 percent of enterprises : 
today. “Pursuing heterogeneous storage management : 
: is a strategic imperative this year and beyond.” ; 
Both the larger, 289-user survey and the in-depth 


specific backup requirement. 


interviews with the three VERITAS customers showed 
a core requirement in the storage management buying 
decision is improving administrator productivity. 
“Whether it is storage provisioning, managing storage 
capacity and the storage network, or attending to back- 
ups, storage decision-makers describe how adopting 
new storage management tools has reduced mun- 
dane/routine tasks for administrators significantly,” the 
report says. 

Yankee Group's analysis of the three VERITAS cus- 
tomers, who provided detailed financial information on 
the condition that they not be named, illustrates the 
savings to be had. 

The government agency customer operates a main 
data center with storage growth rates of 100 percent 
per year. It has 52 UNIX servers running a mix of IBM 
AIX and Sun Solaris. Using VERITAS NetBackup to 
back up the servers, and VERITAS Foundation Suite 
for volume management, the agency estimates it 
reduced time spent on storage management tasks by 
25 percent. Additionally, NetBackup enabled the 
agency to use a tiered backup configuration and con- 
solidate storage to four tape libraries, eliminating the 
need for an estimated 11 tape libraries, the report says. 

VERITAS’ service provider customer, which offers 
application hosting services for enterprises, had even 
more stringent storage requirements. The company 
operates two data centers with a mix of 900 Windows, 
Linux and UNIX servers with 63TB of direct-attached 
storage and five SANS with 75 TB of capacity. Using a 
combination of VERITAS Cluster Sever, VERITAS 
Database Edition and NetBackup, the company was 
able to increase uptime to 99.999 percent — the “five 
nines” level that telephony companies strive to meet. 
Its 11-month payback period was the shortest of the 
three customers Yankee Group interviewed. 

The third case study focused on a financial services 
company with a highly transactional environment that 
includes 20 Sun Solaris servers, a SAN supporting 
about 10 TB of data and a mix of Hewlett-Packard, 
EMC and Hitachi Data Systems storage systems. 
Using the VERITAS Foundation Suite, VERITAS 
SANPoint Control and VERITAS SANPoint Foundation 
Suite HA, for failover, the company increased its 
capacity utilization from 25 percent to 85 percent. It 
also increased administrator productivity by about 50 
percent, the report says. 

In its conclusion, the Yankee Group report says cus- 
tomers looking at storage management solutions 
should consider a number of issues, including the abil- 
ity to demonstrate productivity improvements as well 
as a heterogeneous and centralized approach. 

“As the results of this ROI case study indicate, VER- 
ITAS software can provide significant financial benefits 
to customers deploying storage management soft- 
ware,” the report says. “At the highest level, VERITAS 
has demonstrated it can save customers significant 
costs associated with hardware purchase avoidance, 
reduced labor costs due to higher productivity, as well 
as reduced downtime costs.” 
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Cisco Warns Users 
Of Firewall Flaws 


Cisco Systems Inc. issued warn- 
ings about security holes that 
could be used to launch denial-of- 
service attacks against its PIX 
firewall devices and the firewall 
software in its Catalyst 6500 and 
7600 series switches. Cisco said 
users can get free upgrades to 
new software releases that are 
designed to fix the problems. 


Oracle Sees Rise in 


Revenue, Income 


Oracle Corp. reported an 8% 
year-over-year increase in rev- 
enue and a 15% jump in profit for 
its second quarter, which ended 
Nov. 30. Oracle said sales in 
North America bounced back fol- 
lowing a sales force overhaul. 


BY THE NUMBERS 


Q2FY03 


Microsoft Sets Plan 
To End Win 2k Sales 


Microsoft Corp. said it will phase 
out sales of Windows Server 
2000 over a two-year period 
starting April 1. After that date, 
the software won't be available 
through Microsoft's volume-li- 
censing programs. Systems ven- 
dors will stop selling Windows 
2000 next November, although 
users will be able to get copies 
until April 2006 by licensing Win- 
dows Server 2003 and down- 
grading. [For more details, go on- 
line: QuickLink 43647]. 


Short Takes 


Ed Zander, who resigned as SUN 
MICROSYSTEMS INC.’s president 
in July 2002 and has been work- 
ing at an investment firm, was 
named chairman and CEO of 
MOTOROLA INC. . . . Stockhalm- 
based airline and trave) company 
SAS AB and COMPUTER SCIENCES 
CORP. signed an IT outsourcing 
deal that could be worth $1.5 bil- 
lion over nine years. 





Continued from page 1 
EMC/VMware 


250TB of storage across multi- 
vendor storage systems from 
IBM, Hitachi Data Systems 
Corp. and EMC. Stevenson 
said EMC’s goal of virtualizing 
the server stack in order to 
run multiple instances of stor- 
age management software 
without requiring an addition- 
al server piques his interest. 

Stevenson, like many stor- 
age administrators, believes 
that storage management is 
clunky and that reallocating or 
resizing storage resources for 
business applications takes 
too much time and disrupts 
operations. 

“If a virtualization technolo- 
gy can help us enable more 
storage consolidation without 
host downtime or impact, I’m 
interested,” he said. But Ste- 
venson also criticized most 
virtualization technologies as 
being too narrow in scope and 
as locking “users into a partic- 
ular vendor’s product, which is 
not enabling virtualization on 
a heterogeneous level.” 

VMware user Tony Adams, 
a technology analyst at J.R. 
Simplot Co., a $3 billion agri- 
business corporation in Boise, 
Idaho, said, “VMware excels in 
both their technology and 
their customer relations. It’s 
my understanding that EMC is 
also very customer-focused, 
so if they can maintain or even 
strengthen VMware’s techni- 
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cal position, then existing en- 
terprise customers should be 
in good shape.” 

VMware faces competitive 
pressure, particularly from 
Microsoft Corp., which gained 
virtualization technology in its 
Connectix Corp. acquisition 
earlier this year [QuickLink 
42840]. By becoming part of 
EMC, Palo Alto, Calif.-based 
VMware gains the backing of a 
“very large, well-capitalized” 
company with a lot of influ- 
ence in the data center, said 
Gordon Haff, an analyst at II- 
luminata Inc. in Nashua, N.H. 

EMC, meanwhile, is a direct 
competitor in the storage are- 
na with IBM, a company with 
which VMware has a close 
partnership. Haff said he does- 
n’t expect any radical changes 
in that partnership, but IBM 
could become cautious in the 
future. EMC officials, citing the 
differences in product lines, 
said they expect no conflict. 

In a statement, IBM said it 
will still work “closely with 
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VMware and will continue to 
complement our virtualization 
offerings for Intel systems 
with partner technologies.” 

EMC maintains that its own 
and VMware’s product lines 
will benefit from the acquisi- 
tion. For instance, EMC’s Sym- 
metrix Remote Data Facility 
allows one storage array to 
mirror in real time an array in 
another data center. If there’s 
a need for the application to 
switch from the primary to the 
secondary site, there may be 
some application downtime. 

But by integrating VMware’s 
storage and server virtualiza- 
tion capabilities, EMC said it 
will have a technology that al- 
lows an application to switch 
to a different array without 
downtime. “That is one of the 
first things we will be working 
on,” said Chris Gahagan, 
EMC’s senior vice president of 
storage infrastructure. That 
technology is expected to be 
ready a few months after the 
sale is completed, he said. 





BizTalk Server Ship Date Slides to Next Year 


BY CAROL SLIWA 
Microsoft Corp. last week an- 
nounced that packaging and 
pricing won’t change for the 
upcoming release of its BizTalk 
Server software, but the com- 
pany has yet to pinpoint the 
product’s release date. 

Even though the new ver- 
sion is called BizTalk Server 
2004, it had been scheduled to 
ship by the end of this year. 
Eron Kelly, a lead BizTalk 
Server product manager, said 
the product is now expected 
to be released early next year. 
“We won’t ship without cus- 
tomers telling us it’s ready,” 





Kelly said, noting that about 
250 users are testing the soft- 
ware. “We really just want to 
make sure it meets all their ex- 
pectations,” Keily added. 

The third major release of 
BizTalk Server — software de- 
signed to help users integrate 
applications and automate 
business processes — will add 
business-activity monitoring 
and a scalable rules engine. 

It will also ship with Micro- 
soft’s Visual Studio .Net tools, 
enabling developers to work 
in the same environment that 
they’re accustomed to when 
building general Windows- 





based applications. 

The 2004 version will also 
include copies of Microsoft 
Office InfoPath 2003, a new 
product that lets users create 
XML-based forms and submit 
them to XML-enabled sys- 
tems. Kelly said customers 
will get one license of Info- 
Path for each per-processor 
BizTalk license they buy. To 
use InfoPath, the product 
would also need to be running 
on the client, he added. 

Pricing will remain the 
same as it was for BizTalk 
Server 2002, according to Kel- 
ly. The Enterprise Edition sells 
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William Hurley, an analyst at 
Enterprise Application Group 
in Portland, Ore., said VMware 
gives EMC an operating plat- 
form on which to run the 
many management applica- 
tions it has obtained over the 
past year through acquisitions. 

Hurley added that while 
those management applica- 
tions provide EMC with a 
greater opportunity to control 
more of the data center stack 
in an automated fashion, the 
company will fall short of its 
vision to offer users a policy- 
driven technology that con- 
trols data storage from cradle 
to grave if it doesn’t integrate 
those products into a single 
management suite. 

“(EMC has] to be able to ad- 
dress the fact that they do 
have IBM and other diversi- 
fied vendors ... helping cus- 
tomers achieve a lower overall 
business TCO, as opposed to 
selling them pieces of an over- 
all larger technology puzzle,” 
Hurley said. @ 43864 


for $25,000 per processor, the 
Standard Edition is $7,000 per 
processor, the Partner Edition 
is $1,000 per processor, and the 
Developer Edition costs $750. 

Standard and Partner Edi- 
tion customers will get some 
extra benefits. The Standard 
Edition currently allows con- 
nections to 10 trading partners 
and five internal applications; 
that will change to 20 trading 
partners and 10 internal appli- 
cations with BizTalk Server 
2004. The new Partner Edition 
will allow connections to 
three trading partners and 
three internal applications, up 
from two of each with the 
2002 version. @ 43658 
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en Stories That Rocked 
OK, Touched) Your World 


BY MARC FERRANTI 


fter a three-year roller-coaster ride, the IT 
industry settled down a bit in 2003. The year 
seemed to provide a respite from history- 
making corporate scandals, monopoly-busting, and 
the exhilarating but scary boom-and-bust cycle. 
Not that anyone was operating on cruise control, 
as this roundup makes clear. Here are the top 10 
IT stories of the year, not necessarily in order of 


importance: 


Offshore Outsourcing: 
One Worker’s Gain Is 
Another’s Loss 


wg Stories about U.S. companies 
outsourcing work to India 
have been reported for years. 
But this year it became appar- 
ent that Romania, Bulgaria, 
Russia, China, Ghana, the 
Philippines and dozens of oth- 
er countries are also clamor- 
ing for, and getting, business 
from the U.S. The value of IT 
services provided to U.S. busi- 
nesses from offshore labor 
will double to $16 billion next 
year and then almost triple to 
$46 billion by 2007, according 
to market research firm IDC. 
Forecasts such as this sparked 
fears that Western IT workers 
would face increasing compe- 
tition and prompted politi- 
cians and trade unions to raise 
the specter of protectionism. 
@ a2290 

Oracle, PeopleSoft and 
J.D. Edwards Star in 
Merger Drama of the Year 
w Legal battles also added to 
the drama of PeopleSoft Inc.’s 
acquisition of rival ERP soft- 
ware maker J.D. Edwards & 
Co. and its subsequent fight to 
ward off a hostile $5.1 billion 
takeover bid from Oracle 
Corp. Oracle, acting as spoiler 
of the J.D. Edwards deal, got 
hit with several lawsuits by its 
takeover target. The fracas is a 
milestone: The fragmented 
ERP market has been due for a 





shakeout, and the Oracle/ 
PeopleSoft bout may end up 
being just one of many battles, 
as a series of mergers leads to 
a new chapter in a business 
applications story in which 
there are far fewer characters. | 
@ a3320 

On-Demand Computing 
Message Besieges Users 
@ You can call it “utility com- 
puting,” or you can call it 
“adaptive computing,” or you 
can call it “autonomic com- 
puting,” or you can call it 
“mind-numbing vendorspeak.” 
But whatever you call it, the 
on-demand computing mes- 
sage bombarded users relent- 
lessly. IBM, Hewlett-Packard 
Co., Sun Microsystems Inc., 
Computer Associates Interna- 
tional Inc. and Microsoft 
Corp. led the assault, attempt- 
ing to gain mind share from IT 
professionals who are eager to 
boost efficiency and lower 
costs in their data centers. But 
users and analysts agree that a 
computing infrastructure that 
adapts to business needs is a 
long-term vision that will ma- 
terialize only incrementally 
over the next decade or so. 

@ 40444 

Spam Grows From 
Annoyance to Major 
Political Issue 

w This year, spam was a cause 
célébre for politicians in Eu- 
rope and the U.S. In October, 





NEWS 


an opt-in directive came into 
effect for the 15 European 
Union member states. In the 
last few weeks of the year, the 
U.S. Congress followed suit by 
sending an opt-out antispam 
bill to President George W. 
Bush to sign. Squabbles over 
differences in approach gave 
way to agreement that unless 
some sort of an antispam 
crackdown also occurs in 


| Asia, purveyors of unsolicited 


e-mail will find a haven there. 
@ 43300 

Slammer and Other 
Worms Continue to 
Proliferate 

@ The year had just begun 
when Slammer hit the Inter- 
net, proving to be the fastest- 
spreading worm to date and 
reminding Internet users glob- 
ally that security is still an un- 
resolved problem. The good 
news is that most affected or- 
ganizations said prompt reac- 
tions and new security tech- 
nology prevented more wide- 
spread disruptions. The bad 
news is that security flaws in 
popular software will likely al- 
low malicious hackers to con- 
tinue to plague users. @ a1280 


Cee eeeserescecesecssesooseesoes 


SCO Rocks the Linux Boat 
w Just when things appeared 
to be going great for Linux 
the world over, a wrench in 
the works alarmed the open- 
source faithful. When The SCO 
Group Inc. filed a lawsuit in 
March charging IBM with mis- 
appropriation of trade secrets, 
Linux users saw that the move 
involved more than a contract 
dispute. SCO asserts that IBM 
took propri- 
etary Unix code 
and introduced 
it into the open- 
source commu- 
nity. This mud- 
dies the legal 
waters for 
open-source 
software users, 
some of whom 





believe that SCO’s terms could 
restrict Linux users’ ability 

to redistribute source code. 

© a3260 

64-Bit Computing 

Gets Real 


MD 


eraser 


@ While not as mainstream as 
Wi-Fi, low-cost 64-bit comput- 
ing took a step toward prime 
time in 2003. Advanced Micro 
Devices Inc. played a key role 
in lighting a fire under the 
market for 64-bit computing, 
launching the Opteron chip in 
April and the Athlon64 proc- 
essor in September. Since the 
chips run both 32- and 64-bit 
applications, AMD hopes to 
help customers hedge their in- 
vestments in old technology 
and ease the transition to new 
applications. Though desktop 
users will have to wait for 
many applications, as well as 
for a 64-bit version of Win- 
dows that isn’t expected until 
the second half of 2004, the 
stage is set for the average 
user to get the benefits of 
faster video encoding and bet- 
ter performance from complex 
applications such as comput- 
er-aided design. @ 43032 
Wi-Fi Goes Wild 

g@ While Wi-Fi “hot spots” had 
already started to spring up 
in public places last year, it 
wasn’t until this year that you 
could count on finding them 
in coffee shops throughout 
most of the globe’s major 
cities. Intel Corp.’s Centrino 
chip package, tailored for mo- 
bile computing applications, 
helped fuel interest in wire- 
less computing. Meanwhile, 
new specifications such as 
802.llg, combined with new 
smart-antenna technology, 
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will boost Wi-Fi range and 
signal strength and undoubt- 
edly further fuel the wireless 
revolution. @ k1000 

PC Market Shows 

Signs of Life 

w After lying moribund for a 
year or so, PC shipments were 
forecast to grow more than 
11% for 2003. That rate would 
mark double-digit growth for 
the first time since 2000. An 
expected surge in business 
spending in the U.S. helped 
push the forecasts up above 
10%. Analysts are also starting 
to predict double-digit growth 
for 2004. @ a3870 

Optimism Re-emerges 

mw By the end of the year, rosy 
predictions for hardware 
joined upbeat economic news, 
including moves by the Nas- 
daq stock exchange to bring 
more technology stocks into 
its Nasdaq 100, as the index 
rose by more than 40% from 
2002 levels. This gave a lift to 
the end of 2003, which in a 
sense was the year of the tech 
story that wasn’t: Prognostica- 
tors’ forecasts for an upturn in 
2002 had been dashed, which 
had a dampening effect on the 
usual hype surrounding new 
products. 

Now industry watchers are 
starting to talk up technology 
that emerged this year but 
might need a more robust 
buying climate to really take 
off. Look out for a resurgence 
in spending — IDC forecasts 
overall IT spending to grow 
6% to 8% in 2004 — and for 
trends such as the increasing 
use of on-demand computing 
resources, low-cost commodi- 
ty computing systems that in- 
corporate Intel chips, adop- 
tion of Linux and a focus on 
regulatory compliance issues. 


@ 43607 


Ferranti is executive news 
editor of the IDG News 


| Service. Don Tennant 


contributed to this story. 
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SOURCE: CENTER FOR RESPONSIVE POLITICS, WASHINGTON 


Continued from page 1 


to five key lawmakers who 
have taken leadership roles on 
issues such as IT security reg- 
ulation and federal IT acquisi- 
tion policy (see chart below). 
Those lawmakers are Sen. 
Susan Collins (R-Maine), 
chairman of the Senate Gov- 
ernmental Affairs Committee; 
Rep. Christopher Cox (R- 
Calif.), chairman of the House 
Homeland Security Commit- 
tee; Rep. Tom Davis (R-Va.), 
chairman of the House Gov- 
ernment Reform Committee; 
Rep. Zoe Lofgren (D-Calif.), 
who represents tech-dominat- 


IT ORGANIZATION 





ed Silicon Valley; and Rep. 
Adam Putnam (R-Fla.), chair- 
man of the House subcommit- 
tee on technology policy. 

Putnam has threatened to 
introduce security legislation 
next spring if the private sec- 
tor doesn’t improve IT securi- 
ty on its own. 

The IT vendor associations 
that have formed PACs in- 
clude TechNet and the Infor- 
mation Technology Associa- 
tion of America (ITAA). 

Those that haven’t formed 
PACs but whose member com- 
panies have made sizable, in- 
dependent donations to key 
lawmakers include the Busi- 
ness Software Alliance (BSA), 
the Electronic Industries Al- 





Key TechNet Members 





Key ITAA Members 





BSA Policy Members 
Key EIA Members 





Key ITl Members 
U.S. Chamber of Commerce 
TOTAL 


Kae Se 


$41,000 | $6 





$207,404 | $62,904 {| $8,500 


liance (EIA), the Information 
Technology Industry Council 
(ITIC) and the U.S. Chamber 
of Commerce. 

Some industry executives 
view the contributions as a 
way to gain access to Con- 
gress. The groups in question 
and the lawmakers they sup- 
port, however, claim that the 
money doesn’t set the agenda 
but supports candidates who 
share their philosophy about 
the roles of government and 
industry. 

Dave Morin, a spokesman 
for Davis, said the IT sector 
supports Davis because of his 
belief that government should 
play an enabling role and not 
an inhibiting one when it 
comes to regulating the indus- 
try. “Companies and associa- 
tions support members with 
the best policy,” he said. 
“Chickens don’t give money to 
Col. Sanders.” 

Bob Dix, Putnam’s staff di- 
rector and a longtime associ- 
ate of Davis’, said that “the 
reason people support [Davis] 
is not because he’s in any- 
body’s hip pocket but because 
they support his economic 
agenda.” 

Putnam has also asserted 
his independence, said Dix. 
During a Dec. 17 meeting of 
the Corporate Information Se- 
curity Working Group [Quick- 
Link 42668], Putnam made 
it clear that his committee 
wouldn’t align itself with the 
agendas set by the industry 
working groups formed at 


ag 
2 aa 





WWW .OPENSECRETS.ORG 


SOURCE: CENTER FOR RESPONSIVE POLITICS. 


www.computerworld.com 


TOP 20 


IT Vendor Contributors in 
2004 Election Cycle 


RANK ORGANIZATION 
Microsoft 

Cisco 

EDS 

Intel 

Collazo Enterprises 
EMC . 


Achievement 
Technologies 


IBM 

g Siebel Systems 

10 Hewlett-Packard 
ft Gateway 

12 eBay 

13 Dell 

14 Oracle 

15 

16 TechNet 


17 eScription.com 


18 Intergraph 
19 Texas Instruments 


20 Computer Associates 
International 


Note: 2004 election cycle data reported by Federal Election Commission Nov. 3, 2003. 
Total contributions: $5,587,973. Not all amounts total 100% due to indirect donations. 


the National Cyber Security 
Summit on Dec. 3 [QuickLink 
43294]. 

Harris Miller, president of 
the Arlington, Va.-based ITAA, 
made no apologies for his or- 
ganization’s role in the politi- 
cal process. “ITAA makes PAC 
contributions to support 
members in both parties who 
see the future of the Internet 
based on competition, not reg- 
ulation, and who advocate po- 
sitions on issues we consider 
important to the health and 
vitality of the IT industry,” he 
said. 

TechNet, whose PAC has 
donated nearly $305,000 to 
lawmakers since 1998, didn’t 
respond to requests for com- 
ment; the BSA and the EIA 
also didn’t respond. 

Shannon Feaster, a spokes- 
woman for the Washington- 
based ITIC, a lobbying group 





whose 29 member companies 
are some of the largest ven- 
dors in the IT industry, said 
that the ITIC doesn’t give 
money to PACs. 

ITIC member companies, 
however, have independently 
donated more than $85,000 to 
key lawmakers. 

Andrea Hofelich, a spokes- 
woman for Collins, claimed 
that because the senator has 
focused mostly on the govern- 
ment’s own IT acquisition 
programs, campaign contribu- 
tions haven’t been an issue. 
Collins “always approaches 
the issues with an open mind 
toward what’s best for the tax- 
payer,” she said. @ 43668 
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OPINION 


MARYFRAN JOHNSON 


crambled Priorities 


HE DIRE NECESSITY of setting priorities 
has been on my mind ever since I stepped 
off an airplane last week and realized that 
I had done no Christmas shopping. This 
was a looming crisis of spectacular proportions, 
involving expectant friends and merciless family 


members in several 
states. They would be 
neither mollified nor im- 
pressed by my lame ex- 
planations of how the 
holiday season had some- 
how caught me unawares. 

Only a few weeks earli- 
er, my priorities seemed 
perfectly aligned. When 
there’s so much to do that 
it’s simply too much to 
accomplish everything, 
most of us just do the next 
thing on the list. Whatever that is. 

IT organizations are guilty of this 
behavior on a much grander scale, es- 
pecially during this prolonged stretch 
of “doing more with less.” This leads 
to impossibly long project lists and 
stretches resources wafer-thin in all 
directions. It also lengthens the eter- 
nal struggle to align technology spend- 
ing appropriately with business needs. 

And this means real trouble in 2004. 

Why? Because the IT resources 
balancing act now includes perilous 
new elements that can’t be ignored, 
as this week’s Cover Story on priori- 
tizing business projects, security and 
legislative mandates points out [“Too 
Much to Do!” QuickLink 43236]. The 
biggest challenges for IT organiza- 
tions in the coming year won’t in- 
volve debates over Web services or 
wireless rollouts. They won’t revolve 
around internal business units or 
even external customers. They’ll in- 
volve lawyers, auditors and worried 
boards of directors — a trio of exter- 
nal factors that will reshape the IT 
management landscape in unfore- 
seen ways. 

“It’s frustrating. I have other aspira- 
tions, like growing the company, satis- 
fying the customer, increasing opera- 
tional efficiencies,” says Marty Chuck, 


CIO at Agilent Technolo- 
gies, one of the companies 
profiled in our story. “I 
don’t want to be spending 
on [regulatory issues]. It’s 
a necessary evil, chewing 
up resources we'd rather 
spend on something else. 
Chuck makes the im- 
portant point that IT 
alone can’t be responsible 
for solving these prob- 
lems. Senior business 
management needs to 


” 


help set priorities about how regula- 


tory and security issues should be 
handled. “You've got to get senior 
business leaders into the process, or 
it can eat up a lot of time and mon- 


| ey,” he warns, referring to that IT 


propensity to take on yet another 
problem and overengineer the so- 
lution. 

Our story delves into the details of 
how several companies — Agilent, 
Harrah’s Entertainment, CIT Group 


| and Pacific Gas & Electric — are bal- 
ancing their regulatory risks with 
their business priorities for the com- 
ing year. CIT Group, for example, 
brought in a consulting group to help 
create a mapping process that ranks 
the security risks of different applica- 
tions. The CIO also pulled the CFO 
and various business units into the 
act of determining expense levels 
and project pacing. 

I heard that same desire for deeper 
IT/business collaboration in setting 
priorities echoed recently at UCLA, 
during an IT executive education 
program at the Anderson School of 
Business. Two dozen senior IT man- 
agers were debating how to best 
show leadership on the business side, 
given the way so many companies 
still view IT as a service organization 
rather than a strategic player. “We’re 
here to learn the business models, to 
get beyond just great competence in 
IT,” said one executive. 

Getting beyond technology compe- 
tence and connecting with business 
priorities is the single most impor- 
tant task facing IT leaders in the 
coming year. And the best IT organi- 
zations will use this looming crisis of 


| regulatory compliance and security 


threats to make that connection and, 
more importantly, to help unscram- 





| ble those priorities. @ 43649 








\NSTEAD oF A TREE, 
THIS YEAR We DECIDED’ 
TORT ACONORESSMAN, 


~ 


5 
ej ww. jklossner.com 


79 
2 





www.computerworld.com 


PIMM FOX 


IT Over 
There, 
If You Dare 


LONDON 


UROPE’S IT HIRING is 

rebounding, albeit slow- 

ly, primarily because of 
developments in the areas of 
outsourcing and corporate 


governance. U.S. IT pros in- 
terested in international careers could 
have a leg up, since they’re very famil- 
iar with the first and gaining experi- 
ence with the second. 

Helena zu Hohenlohe, an IT special- 
ist at London-based headhunting firm 
Christopher Beale Associates Ltd., says 
companies, particularly in financial 
services, define corporate governance 
in terms of operational transparency. 
European executives see IT as the tool 
to monitor day-to-day operations — 
guarding against the sorts of financial 
and legal snafus that 
U.S. firms are still 
reeling from. Senior- 
level IT managers 
who can combine 
tactical technology 
knowledge with a 
firm grounding in fi- 
nancial controls, se- 
curity and disaster 
recovery are highly 
prized. 

Basel II and Sar- 
banes-Oxley have 
created a double-barrel headache for 
many European companies. Basel II is 
an international bank accord sched- 
uled for approval in 2004 that governs 
accounting procedures at global banks 
and financial services companies. Sar- 
banes-Oxley created a new set of U.S. 
regulations pertaining to public com- 
panies, financial reporting, auditors 
and corporate executives. 

The complexities of these directives 
put pressure on IT departments to 
build new risk management models, 
elaborate accounting controls and 
snappier ways to price loans, assets 
and liabilities. 

And companies need to get the work 
done quickly, so the jobs are there. Af- 
ter all, everyone wants to keep the reg- 
ulators happy. 

Companies also want to keep the 
stockholders happy, so managers are 
expanding outsourcing to reduce costs. 
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IT specialists experienced in wrestling | 
with shared responsibilities while 
steering a path for development and 
cost-cutting are in demand. To be a 
CTO or CIO in Europe, you've got to 
show how you're going to manage IT 
operations when half the IT staff is in 
India or really works for IBM or EDS. 

“Because companies are outsourcing 
great chunks of IT,” says Hohenlohe, 
“you can’t think in terms of ‘my people’ 
or ‘your people’ anymore. You have to 
think of ways to link IT resources and 
responsibilities.” 

An accompanying trend is the devel- 
opment of specialist centers within IT. 
That has arisen because it has become 
difficult to manage technology and 
vendor relationships without centraliz- 
ing responsibility. For example, setting 
up an ERP specialty devoted to an SAP 
implementation is common. 

“Companies have rationalized sys- 
tems,” said Hohenlohe. “Now they 
need people to manage the infrastruc- 
ture, and that can include an out- 
sourcer, a custom application and links 
to outside services.” 

If this all sounds daunting, it is. But 
don’t be dissuaded — many positions 
still come with four weeks’ vacation. 


@ 43518 


MICHAEL GARTENBERG 


"Tis the 


Season to 
Predict 


HIS IS MY favorite 

time of year. I’m not 

talking about the holi- 
days, the good cheer and sea- 


son’s greetings. I mean Pre 
diction Season, when everyone with 
an opinion publishes a list of what he 
thinks lies ahead. In the spirit of that 
season, here’s my 2004 Top 10 forecast. 

1. Converged devices will remain a niche. 
Despite all the hype, converged mobile 
devices still won’t have strong appeal 
in the market, and no device that at- 
tempts to integrate three or more pri- 
mary functions will win over the mar- 
ketplace. Users are willing to carry up 
to three devices. Handheld adoption 
will be driven by primary intended 
use, with secondary functions only 
contributing value to the product, not 
serving as the reason for buying it. 

2. Wi-Fi will overtake wired. Security is 
good enough, and IT shops are looking 
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for new ways to increase 
productivity. Secondary 
benefits are important as 
well, and corporate Wi-Fi 
will become the norm and 
not the exception. 

3. Security will still be a hot is- 
sue for Microsoft. This one is 
easy. As long as Microsoft 
relies upon a core operating 
system that was architected 
when the Internet was a 
tool for scientific research, 
security issues will abound 
as cybercriminals play cat 
and mouse with Redmond. 

Longhorn can’t ship any too 
soon. Speaking of which... 

4. Longhorn will become the answer. If 
you ask any question about Windows 
deficiencies, be prepared to hear “It 
will be fixed/added in Longhorn” from 
Microsoft. 

5. Apple will return to the IT market. The 
time is right. While Microsoft remains 
in a Longhorn holding pattern, Apple 
Computer will seize the opportunity to 
gain some modest ground with IT de- 
partments that are looking for valid 


Microsoft alternatives. 

6. Tablet PCs will go main- 
Stream. The new hardware 
is great, and the new oper- 
ating system makes the ex- 


price differentials and new 
form factors, tablet com- 
puters will go from the 
20% of IT departments pi- 
loting them this year to 
full-scale deployments at 
many more companies. 

7. Instant messaging scan- 
dals will replace e-mail ones. IT 
shops that aren’t using se- 
cure IM will likely face 

some public embarrassment over in- 
formation discussed in a chat that 
someone thought was private and later 
was publicly disclosed. 

8. Corporate weblogs will catch on. Busi- 
nesses will begin to see the weblog 
light. For internal communication, 
blogs are ideal, and they also work 
well for marketing communications. 
Subprediction: More employees will 
be fired for comments made on their 
personal weblogs. 
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9. IT will manage commingled information 


| spaces. IT should begin to deploy effec- 
| tive synchronization tools that will eas- 


ily let users commingle business and 


| personal data. IT should also be pre- 
perience better. With lower | 


pared to support the synchronization 
of information on two or more comput- 


| ers. It’s not ideal, but users no longer 
| nicely segment themselves for IT. 


10. Moore’s Law will continue to be irrele- 
vant for most users. While speed increas- 
es are nice, they remain unjustified for 


| most users, for whom “fast” was fast 


enough around 1999. The focus will 


| be on vendors providing more cus- 


tomer-based software that increases 
productivity rather than on feeds and 


| speeds. 


Most important, we will hopefully 
reap the benefits of technology in a 


| new year filled with peace, prosperity 


and positive growth. Best wishes for 
the holidays, and see you in 2004. 


| @ 43516 
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More columnists and links to archives of previous 
columns are on our Web site 
www.computerworld.com/columns 


Laughter Reloaded 


ICHOLAS PETRELEY’S spoof 

of The Matrix Reloaded {“Net- 
Ware Reloaded,” QuickLink 
42908] was incredible. | almost 
busted my gut laughing. | have read 
Computerworld for years and ap 
plaud the way in which you still 
manage to keep a sense of humor 
while doing a great job of reporting 
IT news. Keep up the great work! 
Damon Runion 
Reston, Va. 


Think Thin 

INCE | STARTED learning how 

to develop computer software 
from IBM 37 years ago, | have seen 
many changes. Now | work in state 
government with core business 
systems where we have large data- 
bases, complicated business logic 
and severe budget constraints. It is 
encouraging to read about people 
realizing that thick clients require 
more support staff and cause high- 
er costs [“IBM’s Mills Sets Software 
Sights on Middleware, Linux,” 
QuickLink 42279]. We have had 
very good success the past two 
years with a Web server that exe- 
cutes on the mainframe under the 


| graphical functions he likes without 
| giving up the traditional security, re- 


| Budget systems development 


| umn Frankly Speaking. However, in | 
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z/OS operating system (Shadow 
Web Server from Neon Systems). 
We can give the end user all the 


liability and scalability. | hope more 
people realize that there are good, 
economical alternatives to Micro- 
soft and client/server systems for 
large applications. What is wrong 
with Cobol? 


Agness Gunter 


specialist, Office of State 
Budget and Management, 
Raleigh, N.C. 


No Help Needed 


ALWAYS LOOK FORWARD to 
reading Frank Hayes in his col- 


his Dec. 8 article titled “Talk Is 
Cheap” [QuickLink 43293], he isn’t 
the astute observer he usually is. 
Decrying the lack of government 
meddling in IT security, he says that 
“we are truly on our own.” | can’t 
imagine not wanting to be on my 
own. | don’t want the “full, active 
support of the U.S. government. . . 
in securing cyberspace.” That can 
only lead to increased costs and 
further government encroachment 





where it doesn’t belong, not to 


| mention yet another taxpayer-fund- 
| Finally, we escalated to Microsoft 
| support managers, and a techni- 


ed boondoggle as the federal gov- 
ernment tries to establish one-size- 
fits-all security standards. Thanks, 
but they've been enough help al- 
ready. 

Cathy Taddei 

Portland, Ore., 


Cathy.Taddei@comcast.net 


A Call to India 


UR EXPERIENCE with Micro- 
soft support has always been 


| excellent, but this past month, 


when we had an Exchange prob- 
lem, our call got routed to a support 
center in India [“Offshore Support 
Questioned,” QuickLink 43340} 
The technician made little at- 
tempt to understand our problem, 
merely consulted the Microsoft 
knowledge base articles (some- 
thing we could just as easily do), 


| and suggested we rebuild the 


whole machine and reinstall Ex- 
change, which would have involved 
a huge investment in time, the loss 
of significant data and e-mail being 
down for an extended period of 


time. We asked to be placed back in | 


the call queue (to get a new techni- 


| cian) and got routed back to the 





same support center in india - with 
the same result - four more times. 


cian from Dallas called. He solved 


the problem within 15 minutes - all 
we had to do was log in from an NT 
| machine to update permissions 

| (our 2000 machines weren't work- 
| ing). Dramatically less involved 
(and less costly) than reinstalling 

| Exchange. Microsoft may say they 

| open new support centers thought- 
| fully, but our experience suggests 


otherwise. 
Jim Miller 


| Chief technology officer, 


Creditex Inc., New York, 
jim@creditex.com 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 


| Path, Framingham, Mass. 01701. 


Fax: (508) 879-4843. 

E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


For more letters on these and 
other topics, go to 
www.computerworld.com/letters 





We see management a 
little differently from the 


rest of the crowd 


2 Not with us itt isn't. 


At NetlQ, we don’t see a problem. Only solutions. 
Managing your Windows server environment is easier 
than ever with Microsoft Operations Manager. And, 
as a key Microsoft partner, NetlO extends Microsoft 
Operations Manager to manage and secure your 
entire enterprise, whether you're driving UNIX, 
NetWare, Linux, Windows...or all of them. NetIQ. 
We're the management people. And nobody does 
management smarter. Nobody. 


Se >> ClO eBook! Get your free copy of From Chaos to Control: 


The ClO’s Executive Guide to Managing and Securing 


the Enterprise. www.netiq.com/manageability 
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HANDS ON REVIEWS 

Taming the 

Rattle and Hum 

Here’s advice for the home 
worker trying to muffle the roar 
of the fans and other compo- 
nents of noisy PCs. Page 30 


FUTURE WATCH 

Digital Defense 

As network intrusions grow in number 
and sophistication, researchers are find- 
ing ways to make systems more like the 
human body — adaptive and resilient, 
even against unknown attacks. Page 32 


&A 

igging Into Documents 
Ronen Feldman, president of text 
mining software company ClearForest 
Corp., tells Computerworld how he 
thinks the technology can transform 


business. Page 28 
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OVERCOMING 
WEB SERVICES 


INOECURIT! 


ED 


OUTLOOK: Webservices security standards still aren't 
complete, but putting an application tied to sensitive 


data on the Web needn't be a recipe for 


disaster, if you follow the current 
Web services security model, 
users say. BY MARK HALL 








RITISH COLUMBIA'S Ministry of 
Attorney General has a database 
with secret witness information. 
DaimlerChrysler Services North 
America LLC runs business ap- 


| plications with sensitive dealer and 


partner data in them. Lydian Trust Co. 
holds private financial information 
about its wealthy clients in its data files. 
All these organizations have some- 
thing in common: They expose those 
systems to the wild and of- 
ten dangerously insecure 
World Wide Web. And 
they confidently secure 


| any access to or transac- 


tions on those systems through 
Web services. 

But none of them stepped blithely 
into Web services development. That’s 


| because the state of Web services se- 


curity standards remains in flux. Only 


| one of the proposed standards, Web 
| Services Security, has been completed, 


and it hasn’t been officially adopted by 


a standards body. The other initiatives 


| are still in development by various 


vendors, prompting concern that com- 
peting approaches will emerge. 
Third-party products are filling the 


qoncmnnnem 
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standards gap for now. Most suppliers 
claim that they will adopt the stan- 
dards that do emerge. But any IT shop 
that’s attracted to the power and flexi- 
bility of Web services must do its 
homework. 


No Room for Compromise 
“We spent several months trying to 
solve the problem of giving real-time 
access to our database without com- 
promising the security 
of the information,” says 
Robert McDonald, director 
of application manage- 
ment services at the 
Victoria-based Ministry of Attorney 
General. 

Tony Lyons, a senior IT manager at 
DaimlerChrysler in Farmington Hills, 
Mich., echoes the concern for caution, 
saying he was “absolutely” nervous 
about Web services security at first. 
Lyons recalls that throughout his com- 
pany’s 10-month project, which con- 
cluded in late summer, security was 
“paramount because people outside the 
network were getting access.” Develop- 
ers had to submit their designs and code 
to multiple, rigorous security reviews 
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by corporate standards committees. 

These weren't rubber-stamp exercis- 
es. His team was more comfortable 
building security into client/server 
software, where they had loads of 
experience with middleware tools 
that used Common Object Request 
Broker Architecture, Component Ob- 
ject Mode! (COM) and other methods. 
Now they had to defend their use of 
XML, SOAP and other Web services 
standards. It was “a challenge,” Lyons 
acknowledges. 


John Studdard, chief technology offi- 
| “separate the client from the database 


cer at VirtualBank, a division of Lydian 
Trust in Palm Beach Gardens, Fla., also 
dismisses using technology “from the 
old days,” despite the comfort level de- 
velopers have with it. “DCOM, COM 
and such are complex to maintain and 
complex to secure,” he says. 

Luckily, the multitier model of Web 
services has matured fast enough to 
make it possible to implement secure 
software for a broad base of online 
users. “Web services works well, espe- 
cially when we work with our outside 
constituents,” says McDonald. 

The ministry assigned him the task 


of building an application that gave on- | 
| traffic-court dates would. 


line access to court proceedings in the 
province. Until the application rollout, 
if anvone wanted to find out, say, a giv- 
en trial date or the judge assigned to a 
particular case, they had to visit a 
courthouse. The access problem was 
compounded by the fact that all infor- 
mation related to provincial cases 
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resided in a centralized Oracle data- 
base that included information about 


| witnesses and other restricted data. 


And the data changed often, adding to 
the difficulty of the project. 

“The information was sensitive and 
dynamic, with lots of last-minute 
changes,” McDonald says. That meant 
he couldn’t simply create a subset of 
the database and expose it to the Web. 


Security Through Separation 


McDonald hails the architecture of 
Web services as secure because he can 


and both from the security model.” 

In the ministry’s Justice Information 
Systems project, called JUSTIN Public 
Inquiry, users sign on via a browser, 
and a Java-based Web services pro- 


| gram sends the log-in information in 


XML-encrypted format to a gateway 
from Layer 7 Technologies Ltd. in 


| Vancouver, British Columbia. The Se- 
cureSpan gateway authenticates the 


user and reveals only authorized ser- 


| vices to whoever logs on. For example, 


a lawyer in a financial corruption 
trial might have access to different 
services than a citizen checking on 


The system encrypts each message 
sent using 128-bit algorithms and can 


| authenticate it to ensure that no one 


has hijacked a session. And the ser- 
vices that are exposed to users are 
written as Java stored procedures, so 
no other action can be taken except for 


» May accept only Kerbero 


authentication of users 


/ IBM: Microsoft, RSA Security 
1 Inc. and now in the evalu: 
rust draft speci 
ng service can 
jat authenticates 
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service and distrib 





| the function of the procedures. 


McDonald praises the tools Oracle 
Corp. has put into its Oracle9i data- 
base. He says the Web services tools 
greatly eased the creation of Java 
stored procedures, which enhance the 
application’s security. 

At VirtualBank, where Studdard 


| oversees Web services development 


for all the divisions of Lydian Trust, 
credit and fraud checking is done 
using external credit bureaus, such as 


| LendingTree Inc., over the Web. Be- 


cause the data transferred between 
services is sensitive, such as Social Se- 
curity numbers and account informa- 
tion, the messages follow the Web ser- 
vices security model for encrypting 
messages between sites. 

Studdard also uses Directory Smart 
from OpenNetwork Technologies Inc. 


| in Clearwater, Fla., which works with 


his Windows 2000 Active Directory 
Service to authenticate external users 
to access internal Web services and au- 
thorize their levels of access. 

Two key benefits of the security 
model in Web services are that it can 
scale and that, because the securitv 
process exists outside the applications 
that use it, the technology supporting 
the process can change as needed 
without affecting the application, 
Studdard argues. Likewise, while 
OpenNetwork strives to work within 
the working specification being devel- 
oped by Microsoft Corp., IBM and 
other vendors for the Web Services 
Policy Framework, Web Services Trust 
Language and other emerging stan- 
dards, Studdard says he’s confident 
that if his vendors fall out of compli- 
ance, he can simply swap out the secu- 
rity services. 

“We have a layer written to change 
out our security depending on where 
the standards evolve,” he says. 

Getting up to speed on the architec- 
ture, methodology and tools for writ- 
ing Web services applications and 
then securing them remains the most 
common problem today, users say. 
Success, however, has spurred wider 
adoption, putting a greater emphasis 
on security. 

Of the 26 projects on McDonald’s 
to-do list for the next 12 months, “six 
or seven have an e-service component 
to them,” he says. “And all here agree 
that Web services will be the architec- 
ture.” @ 42781 


A MATTER OF TRUST 


Distrust among vendors has held back development of 
Web services security standards: 


QuickLink 42783 
www.computerworld.com 


WEB SERVICES 
SECURITY TOOLS 


ACTIONAL CORP. 
Mountain View, Calif. 
www.actional.com 





@ SOAPstation is a Web services broker 
that acts as a proxy, brokering the 
interactions among Web services. 


@ SOAPstation Edge is an XML firewall for 
incoming service requests that cross 
multiple security domains. 





DATAPOWER TECHNOLOGY INC. 
Cambridge, Mass. 
www.datapower.com 


@ XS40 XML Security Gateway is an 
intelligent XML/SOAP firewall. 





OPENNETWORK TECHNOLOGIES INC. 
Clearwater, Fla. 
www.opennetwork.com 





@ Universal IdP is an identity management 
prcduct with centralized policy enforcement 
for either Net or Java Web services. 


NETEGRITY INC. 
Waltham, Mass. 
www.netegrity.com 





@ TransactionMinder secures access to 
Web services by inspecting the security 
information contained in the XML 
documents submitted by Web service 
consumers. The TransactionMinder XML 
agent communicates with the Netegrity 
Policy Server and processes the 
authentication and authorization steps. 


PHAOS TECHNOLOGY CORP. 
New York 
www.phaos.com 





@ Phaos XML includes tools for encryption 
and signing. It complies with the W3C XML 
Signature and XML Encryption 
specifications. 





@ Phaos XKMS provides support for 
registration, location and validation of 
keys and certificates using a trusted 
Web service. 





@ Phaos SAML is complementary to 
Phaos XML for XML-based security 
assertions for entity attributes, 
authentication and authorization. 


@ Phaos Liberty works with Phaos XML 
and provides secure federated network 
identity for single sign-on. 








WITH FUJITSU ON BOARD, 
PERFORMANCE AT AMERICA WEST 
HAS REALLY TAKEN OFF. 


When America West set out to become a leader in low-fare busine 
travel, the first requirement was to improve on-time performance. 
Every department pitched in, and the results—for customers, 
employees and shareholders—have been dramatic. 


One key contributor was the airline’s IT department. By replacing 
older, less reliable servers with new high availability servers from 


Fujitsu, America West reduced technology related delays by over 75%. 


Now, thanks to a new server architecture and proactive managed 
services from Fujitsu, passengers are getting where they're going 
faster. And America West is really going places, too. 


Visit us.fujitsu.com/together for more on how Fujitsu servers and 


managed services helped America West improve on-time performance. 


Working together, we can accomplish anything. 


\ 


3 Fujitsu. All rights reserved. America West and the America We 


of America West Airlines, Inc 
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THE POSSIBILITIES ARE INFINITE 
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THE WORLD'S #1 WEB HOST IS HERE 
TO HELP YOU DO MORE ON THE WEB 


GET OUR BEST HOSTING PLAN — NORMALLY $29/MONTH 


BR AA w ea = 


LIMITED TIME PRE-LAUNCH PROMOTION 
SAVE $1000 — NO COMMITMENT NECESSARY 


500 MB, 5x FTP backups, Firewalls 

5000 MB/mth traffic, $0.99/GB only for additional 

traffic, 99.9% up-time guarantee 50 POP3 accounts, Symantec 

virus scanning, Webmail Live site statistics, log files, 

turnkey CGl-library, own CG!, FrontPage 2002 extensions, multiple pass- 

word protection, mySQL, SSL encryption, Cron Jobs, SSH, Developer tools 
1&1 Express support 


No credit card needed. 
No obligations. No banners. No 
spam. No calls. Strict privacy. 


Upload your current 
site. Or, build a new one with 
tempiate-ready WebsiteCreator. 


Form editor, Newsletter Management tools, 
one-on-one online dialogues, turnkey web database applications, Chats, 
Forums Template-ready online WebsiteCreator, fuli ver- 
sion NetObjects Fusion 7.0, Search-Engine Registration and many 
more worth $300, absolutely free Register or transfer 
unlimited com and other leading domains for just $5.99 each per year, 50 
sub-domains, point up to 100 domains registered elsewhere to this pian 
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Sign up today 
and we'll give you a $25 voucher 
for Google AdWords™. 


Upgrade your site 
with ready-to-run forms, chat, 
database applications and more. 


By creating this unique opportunity to test 1&1 risk-free, we are investing in you rather than additional 
advertising. You see, we believe you'll be so pleased with our services, you'll stay with us and even recommend us to your friends. Then after 


the 3 years, you can effortlessly switch to any 1&1 hosting plan ranging from $5 to $29. One plan per customer only. Promotion expires 1/14/04. 


WEB FREELY 
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Formerly used primarily 

by the intelligence com- 

munity and businesses 

that are strongly depen- 

dent upon research, text 
mining technologies are now beginning 
to find more general acceptance. The 
mounds of unstructured data that have 
been piling up in companies for decades 
are growing larger as a result of new 
regulatory requirements that are forcing 
companies to retain e-mail and other 
documents — and to be able to find spe- 
cific information in them. The key to 
making text mining work for business — 
not to mention the intelligence commu- 
nity — is striking a balance between ac- 
curacy and speed, says Ronen Feldman, 
chief scientist at text mining software 
company ClearForest Corp. in New 
York. In a recent interview with 
Computerworld’s Tommy Peterson, 
Feldman discussed how text mining 
technologies work and what promise 
they hold for business. 


What is text mining? How do you squeeze 
information out of unstructured data? Basi- 
cally, text mining is the same thing as 
data mining for structured data, but for 
documents. So the first thing that you 
have to do is create some structure. In 
order to create structure, you actually 
have several possibilities. The easiest 
way is to work with the bag-of-words 
model. Basically, each document is just 
a collection of words. That is purely 
statistical — you’re doing no semantic 
analysis. There are still some compa- 
nies who are doing this. They basically 
use the simplest possible approach. 
The next level is categorization. You 
basically provide tags for the whole 
document. The last way to structure 
the documents, which is the most so- 


Digging Into 


As the need to exploit unstructured data grows, 
technology is evolving to meet it, says 
rForest’s Ronen Feldman. 
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phisticated, is to do information ex- 
traction. There you don’t provide tags 
for entire documents, but you actually 


| extract entities and relationships from 


the document. But that means that the 
processing is much more sophisticated 
and obviously takes more time. 


Do companies have to choose speed vs. 


| sophistication? This is the spectrum — 
| [bag-of-words] is the easiest and of 


course the fastest, but it doesn’t buy 
you a lot of mileage, because there is 
no semantic analysis. With [categori- 
zation], you have a little more, but still 
it’s still not a good enough infrastruc- 
ture, because you won’t have enough 
tags per document — usually two or 
three tags per document. 


nal 


ClearForest Corp. 


President and 
chief scientist 


Ph.D. in computer 
science from Cornell University; 
served as a captain in the infor- 
mation and intelligence services 
of the Israeli army; helped found 
ClearForest, which was original- 
ly Instinct Technology, in 1993; 
serves as a consultant to IBM, 
E]-Al Israel Airlines, Telrad Net- 

Bezeq, Israel Electric Co. — 
and the Israel National Coal Co. 





Let’s take a document of two pages. If | 
you do information extraction, you can 
expect 50 to 100 tags, a completely dif- 
ferent order of magnitude. Clearly, you 
get a much better foundation for text 
mining. Information extraction is the 
key challenge, and it’s what really lies 


| at the heart of our ClearText product. 


MORE ON 


Tell me more about information 
extraction. There are two 
main camps in how to do 
information extraction. The 
first camp is the knowledge 
engineering camp, where 
structurally derived pat- 
terns help you to identify 
that specific noun phrases 
should belong to a certain class. The 
classes would depend on the domain 
in which that document is living. If 
we're talking about the intelligence do- 
main, then the classes of entities you’d 
be interested in would be people, orga- 
nizations, weapons, things like this. Re- 
lationships would be .. . family rela- 
tionships, people who served together 
in the army, two people who talked on 
the phone. In order to develop those 
entities and relationships in the knowl- 
edge engineering approach, you have 
to define patterns for each entity and 
for each relationship. You do it usually 
if you have a very good development 
environment, and [ClearForest] has 
had such an environment for six years, 
which we continue to enhance and add 
more features to all the time. 

The second camp is based on ma- 
chine-learning algorithms. In machine 
learning, you basically learn by exam- 
ple. There are rules, but the rules are 
written automatically, so it’s mainly 
statistical. The problem is that you 
need to provide thousands of examples 


our Web site: 


TEXT MINING 


For more of the Ronen 
Feldman interview, visit 
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sometimes, meaning thousands of doc- 
uments. Thousands of documents can 
take you several months. We saw ina 
practical project [that] customers are 
just not willing te do it and in many 
cases just killed this approach com- 


| pletely. They prefer to use our ap- 


proach because then they can rely on 
5 concepts that we have devel- 
oped already. It’s not as 
though we start from 
scratch — we have already 
developed most of the do- 
main-specific entities. 


Does this end up being knowl- 
edge management? Knowl- 
edge management is a very 
broad term; people have used so many 
different tools to do knowledge man- 
agement. We are at the infrastructure 
level, so most of the knowledge man- 
agement tools should use our software. 


Do you worry about legal issues? When cor- 
porate e-mails are mined, will employees feel 
that their privacy is being invaded? We pro- 
vide the tools; the usage is up to the 
customer. They need to worry if they 
are doing something which is illegal. 
We create generic technology and sell 
it to customers. They have to live up 
to traditional promises not to snoop 
around their employees too much. The 
only area I can see it used is in compli- 
ance, and that should be legal for com 
panies to check that their employees 
are not doing anything they shouldn't. 


Can you give me a good idea of what this 
technology is going to bring to a specific 
business? Let’s take a pharmaceutical 
company. The researchers need to read 
a lot of papers in order to make infer- 
ences and get more acquainted with 
the subject. And usually they spend a 
lot of time with [the] Medline [Web 
site] and [scientific] journals like that. 
And they spend a lot of time just 
searching. With an application like 
ours, they can can take entities they 
are familiar with — genes, etc. — and 
specify the queries in a much more fo- 
cused way. And that means that they 
focus a lot more on the real develop- 
ment. The hard labor of searching for 
the information will be saved, which 
will shorten the time that they take to 
find new drugs. 


How will this technology change the way 
companies do research? I think that most 
of the hard labor will be saved, and you 
will be able to focus on thinking and 
making inferences and conclusions — 
things machines are actually not so 


| good at. @ 43575 
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See how much storage-you have. 
See how much storage you need. 
See it adjust without-doing a thing. 


Tivoli Storage Management helps optimize your storage systems. Underutilized'space:is automatically 
identified. Nonessential data is easily eliminated. It's an integral, affordable complement to server 
consolidation, and it's compatible with.most current storage systems. For more on this award-winning 
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Rattle and Hum 


Noisy equipme ent 
distraction. Here 
bel levels in your home offic 


r WAS LIKE WORKING next to a 
jackhammer. Every time the home- 
built PC in my three-computer 
home office was turned on, it shat- 
tered the relative quiet with roar- 
ing cooling-fan noise. 

I had to shut the PC down when I 
was talking on the telephone in order 
to hear the person on the other end of 
the line. The screaming fans could 
even be heard in the living room, one 
floor below. Something had to be done. | 

An online search uncov- 
ered a multitude of sound- 
reducing replacemient com- 
ponents, from case fans to 
power supplies to insulating 
kits. By swapping out parts, I was 
eventually able to reduce the roaring 
sound of the PC by more than half, 
restoring my sanity. 


By the Numbers 

Sound is measured in decibels (db). A 
10db reduction cuts the loudness of a 
sound by more than half, according to 
acoustics computation. 

To measure the noise in my home 
office, I used a Bruel & Kjaer North 
America Inc. Precision Sound Level 
Meter Type 2203, equipped with an 
octave filter to take sound readings 
from 2] inches away. The meter 
set to use an A-contour sound filter, 
which eliminates inaudible low fre- 
quencies and provides readings more 


was 


closely aligned to those experienced 
by the human ear. 

The sound level in my office with all 
the PCs off is 23db — about the same 
as the noise level of a quiet living 
room. But when the home-built PC 
was turned on, it pumped up the vol- | 
ume to 45.5db, roughly comparable to | 

| 


the constant hum of a refrigerator. And 
it was even louder when the hard drive 
was spinning during searches for data. 


can drive the telecommuter to 
are so met ips onreducing deci- 


e. By Todd R. Weiss 


That was where I started. After I in- 
stalled quiet parts, the sound level 
with the once-noisy PC idling came 
down to 3ldb, which is about the same 
as a soft human whisper. The change 
was dramatic — now you can barely 
hear the PC, even if you put your ear 
right next to it. 


The Quiet Begins 

To get the drastic sound reduction, I 

installed major parts and made minor 
modifications, such as 
adding rubber vibration- 
insulating feet for the mid- 
tower Case. 

Other things had to be 
uninstalled. First to go was the stock 
Antec Inc. 300-watt power supply. In 
its place, I tried out two different units 
— a 350-watt model from StarTech.- 
com USA LLP and a 300-watt power 
supply from Nexus Technology BV. 
But neither replacement unit had 
much of an effect on the sound of the 
PC; it turned out that they were over- 
whelmed by noisier parts. 

Next, I swapped out the stock cool- 
ing fan for the Athlon XP 1700 proc- 
essor from Advanced Micro Devices 
Inc. In its place, I installed an 80mm 
Panaflo fan with a copper Thermal- 
Right SLK800A heat sink. The Panaflo 
fan did cut the sound, but only by an 
imperceptible 1.5db. 

Then came the biggest surprise: The 
worst offenders turned out to be the 
two simple and cheap 80mm case fans. 
I got a dramatic 8.5db decrease in 
noise when I replaced them with 

Panaflo fans. The total sound drop, 
now 10db, literally halved the noise 
from the PC — and there were more 
reductions to come. 

I was able to reduce the fan noise 
further by installing Zalman Tech Co. 
Fan Mate | rheostat controllers, which 


| though the N 








you can use to manually reduce fan 


| speeds so they make less noise but still 


provide adequate cooling. Slowing the 
fans by adjusting the Zalman con- 
trollers brought the sound down an- 
other 1.5db to 34db. 


Next to go was the Accelerated 


| Graphics Port video card, which had a 


built-in cooling fan. I replaced it with a 
fanless AGP card, knocking another 
2db off the total. At 32db when it was 
idling, the machine was like a faint 
echo of its former self. 

Now it was time to quiet the West- 


| ern Digital Corp. 80GB 7,200-rpm 


Caviar hard drive. I removed the drive 
from its rigid mount in the PC’s buzzy 
metal case and inserted it into a No 
Vibes III rubber-mounted isolator, 
which suspends the drive in thick rub- 
ber bands to cushion and quiet it. Al- 


hard 
drive made when it was spinning dur- 
ing data searches by 4.5db, bringing 
the overall level to 37.5db. 

The final step was installing sound- 


deadening AcoustiPack foam padding 


inside the PC’s case. The self-stick 
foam pads helped absorb any noises 
remaining after parts were replaced. 
They brought the final reading down 
to a calm 3ldb, for a total 14.5db drop 
in sound. 


Benchmark Comparison 
Inspired by the success ! had reducing 
the noise level of my home-built PC, I 
decided to build a test rig entirely 
from quiet parts. From the start, the 
test rig set a baseline score of 33.5db. 


QUIET TIME 


o Vibes device didn’t low- 
| er the sound level at idle to less than 
| 32db, it did reduce the noise the 
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The results showed that by using quiet 
parts, it’s easy to build a low-noise PC 
— and avoid the anguish of loud 
equipment on the psyches of office 


| workers. 


The second machine features An- 
tec’s Sonata quiet case, which includes 


| arubber-mounted low-noise rear fan, 


rubber hard-drive mounts and a noise- 


| less power supply. Inside is a fanless 
| MSI K7N2-L motherboard fitted with 


an AMD Athlon XP 2200 processor, 
along with a quiet Panaflo 80mm cool- 
ing fan and a Zalman CNPS6000 cop- 
per heat sink. 

I also installed a Seagate Technology 
LLC Barracuda V 120GB hard drive, 


| which is barely audible when it’s run- 


ning. Searches on the Seagate drive are 
so quiet that they don’t affect the 
33.5db sound level even when the disk 


| is thrashing for data. 


The outcome of the experiment was 
clear — I fought the noise, and the 
noise lost. With a little part-swapping, 
it’s possible to keep disruptively loud 
PCs out of the workplace. None of the 
replacement parts are difficult to ob- 
tain or install, and the gains in work- 


place morale and productivity can be 
| dramatic. 


A few new components are certainly 
cheaper than ongoing therapy for a 


| home worker driven to distraction by 
| the rattle and hum of his equipment. 


@ 43367 





"FIND THE VENDORS 


| Tolearn how to contact the vendors of the quiet 
| equipment mentioned in this article, visit our Web site 
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With his home office noise readings drifting toward con- 
struction-site levels, Todd R. Weiss took steps to bring the 
chaos under control. Here’s how he reduced the sound in 


his work environment. 


Replace stock cooling fan on 
Pb gue ce mn UE 


Replace 80mm case fans with 
ORE) 


Adjust Panaflo fan speeds 
using Zalman controllers 


Replace video card with 
* fanless AGP card 


PVR 
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Coming for information security: 


tools for adaptive and resilient 
computing. By Gary Anthes 


HE BATTLE AGAINST computer 
viruses and system intruders 
is often described as an arms 
race, in which increasingly 
powerful weapons are coun- 
tered by ever stronger defenses. But 
this particular arms race isn’t in a dead 
heat; the mavens of malware 
are winning it. 

There are several reasons: 
Computers are increasingly 
connected by high-speed links, 
facilitating the spread of malware; 
software is growing in complexity, 
and with complexity comes vulnerabil- 
ity; and attack weapons are increasing 
in sophistication and ease of use [see 
diagram]. 

But there is hope, say a new breed of 
computer security researchers. A num- 
ber of them met recently at a work- 
shop called Adaptive and Resilient 
Computing Security at the Santa Fe In- 
stitute in New Mexico and unveiled 
ideas for an arsenal of new defenses. 
The measures are based on widely 
varying concepts, and they range from 
ideas to working prototypes to nascent 
commercial products. But they share 
these characteristics: 

® They don’t rely on predetermined 
definitions such as virus signatures, at- 
tack scenarios and vulnerability ex- 
ploits. Thus, they’re able to recognize 


| system which has evolved over millions 

| of years, probably through extensive 

| redesigning, testing, tuning and opti- 

| mization,” says Dipankar Dasgupta, di- 

| rector of the Intelligent Security Sys- 

| tems Research Lab at The University of 

| Memphis. Dasgupta points out that the 
human body protects itself in 
multiple ways. The skin and 
mucous membranes act to pre- 
vent the entry of pathogens 
into the body. But if pathogens 

do succeed in entering the body, innate 

| immune reactions come into play, as 

do acquired or “adaptive” immunities 

that learn from past infections. In addi- 

| tion, the body employs defense mecha- 

nisms at various levels — cellular, mol- 

ecular, peptide/protein and DNA. 

| Just as no one biological protection 

| suffices to keep us healthy, no single 








computer defense is adequate for all 
attacks, Dasgupta says. “Today, these 
things operate independently. They are 
by different vendors; they don’t talk to 
each other very well.” 

But Dasgupta’s lab has built software 
prototypes that address that weakness. 
His Security Agents for Network Traf- 
fic Analysis uses mobile software 
agents for intrusion detection in a net- 
work of computers. Agents monitor at 
multiple levels — packet, process, sys- 
tem and user — using neural networks 
to spot anomalous behavior and “fuzzy 
rules” to decide what action the agents 
should take in the face of an 
attack. 


Variation Helps 
Stephanie Forrest, a comput- 
er science professor at The 
University of New Mexico, 
points out that diversity in 
biological and ecological sys- 
tems leads to robustness and 
resilience. “But our software 
is almost a monoculture,” she 
says. She’s working on “auto- 
mated diversity for security,” 
in which each system is made 
unique by arbitrary random changes. 
“That increases the cost of attack, be- 
cause the attack has to be adapted for 
each computer,” she says. 

Diversity can be created in a number 
of ways, such as by adding nonfunc- 
tional code, reordering code or ran- 
domizing memory locations, file 
names or system calls. 

Other researchers are experimenting 
with a measure called Kolmogorov 
Complexity, the minimum number of 


| Attacks Get Easier, 
| More Powerful 


As the sophistication of Internet attacks increases, the technical knowledge 


tools that novices can invoke with the click of a mouse. 


sophisticated command and control 


| of attackers on average is declining. Sophisticated attackers are building 
| 
| 
| 


cross-site scripting 


| stealth/advanced scanning techniques 


packet spoofing 


distributed 
attack tools 


We can learn from 
biology, says infor- 
Emel 

est ese 


3H 
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bits a character string can be com- 
pressed into without losing informa- 
tion. Scott Evans, a researcher at GE 
Global Research, has used it to study 
attack scenarios. 

Evans analyzed file transfer protocol 
logs and found that attacks, such as a 
stealth port scan, tend to be more or 
less complex than normal behavior by 
predictable amounts, allowing a de- 
fense tool to identify and block the at- 
tacks. The technique is attractive be- 
cause it is adaptive and requires no at- 
tack signature database, Evans says. 

Real-world application of some of 
these ideas lies years in the 
future, but Steven Hofmeyr, 
a former graduate student 
under Forrest, has already 
commercialized some of 
them. He’s developed Pri- 
mary Response, which mon- 
itors and protects applica- 
tions at the operating sys- 
tem kernel level. It uses 
agents to build a profile of 
an application’s normal be- 
havior based on the code 
paths of a running program, 
then continually monitors 
those code paths for deviations from 


| the norm. 


Primary Response works at the ap- 
plication level, where 75% of attacks 
occur, says Hofmeyr, chief scientist 
and a founder of Sana Security Inc. in 
San Mateo, Calif. Protection at the ap- 
plication level will become more vital 
as it becomes more difficult to define 
the network perimeter, where firewalls 
work, Hofmeyr says. “When something 
like Web services really takes off, it 
will really deal a death blow to perime- 
ter [security], because it’s very diffi- 
cult to determine what's inside the net- 
work and what’s outside.” 

When a Primary Response agent 
spots abnormal behavior, it sends an 


| alert to a central server where it may 


be directed to block that behavior 
while letting other activities continue, 
Hofmeyr says. 

Hofmeyr says he’d like to extend Pri- 
mary Response to tuning and debug- 
ging. “A lot of what we see in produc- 


attacks that haven’t occurred before. 

@ They’re intended to allow a system 
to keep running in the face of an at- 
tack, albeit often at a reduced level of 
effectiveness. | 

@ They learn and adapt tochanging | 
attack scenarios. | 

® They limit false alerts, which can | 
render defense systems unusable. 

Some researchers are drawing inspi- 
ration from biology. “The biological 
immune system is an elaborate defense 


network management diagndstics | : feb attacks tion environments won’t be malicious, 
sniffer\ | denial of service ®| but it will be indicators that something 
haakanars automated probes/scans is wrong, such as configuration prob- 
burglaries GUI lems or hardware problems,” he says. 
“When I look at the bigger picture, I 
see this sort of tool as something for 
system health in general.” @ 43308 
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SOPHISTICATION 


sweepers 
hijacking sessions 
disabling audits 
exploiting unknown vulnerabilities 
password cracking 
self-replicating code 
password guessing 
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Suppress IDS Headaches 


Two new capabilities in the freely available 
Snort intrusion-detection system software 
prove their mettle in the field by reducing 
false alarms. By Mathias Thurman 


within normal network traffic 
| flows, IDS sensors generate 
alerts on activity that looks 
suspicious but is actually be- 
nign. When presented with 


ALSE POSITIVES and 
data management are 
two of the most frus- 
trating aspects of using 
an intrusion-detection system, 
but a new version of Snort, the 
freely available IDS that we 
use, has greatly improved the 


choice: either configure the 
sensors to stop sending alerts 
situation. about the event, which means 

We have more than 15 IDS deleting or “commenting out” 
sensors, and a full- ——__1__——_ the underlying rule 
time person is needed from the rules data- 
just to manage the SECURITY base; or take up disk 
IDS infrastructure, in- MANAGER'S 


cluding the constant by storing every in- 
stance of the event. 
The latest release 
~| of Snort includes 
thresholding and suppression 
features. I suspect that these 
improvements will spur new 
| sensor deployments while 
making existing installations 
easier to manage. 
Thresholding, a common 
feature in commercial IDS 
products, helps manage false 
positives. We forcibly prevent 
our IDS sensors from process- 
ing many types of events be- 
| cause of the abundance of false 
positives these rules produce. 
For example, we see many 
| alerts whenever a person or 
| program attempts to access the 
robots.txt file on each of our 
Web servers. This file provides 


deluge of alert data 
that the sensors gen- 
erate. Although we 
configured the sensors to send 
their alerts to our Security In- 
formation Management (SIM) 
software, a product from Edi- 
son, N.J.-based netForensics 
Inc. that does event correlation 
and analysis, the sensors are 
still the first line of defense. 
Data management starts 
with the sensors. SIM applies 
additional correlation method- 
ologies to the events to gener- 
ate more precise reporting and 
additional alerting, but the in- 
dividual network sensors gen- 
erate the actual alerts. The sen- 
sors do this by analyzing the 
etwork traffic and matching 
the pattern of activity to the 
hundreds of rules we set up in 
our Snort rule base that trigger 
alerts on suspicious activity. 
The problem is that we must 
continually tune the sensors 
to our constantly changing en- 
vironment. And one of the 
most difficult aspects of man- 
aging the IDS infrastructure 
is tuning the alerts to reduce 
false positives. In our network, 
for example, we have a lot of 
Web-based activity. Even 


tune the IDS 
sensors to our 
constantly changing 
environment. 





We must continually | 
| vice within a specified block 

| of network addresses triggers 
| the event. For example, we are 


a way for our Web servers to 


| tell search engines which areas 


| of our Web sites shouldn’t be 


accessed. Our Web servers 
contain confidential or sensi- 


| tive information that we don’t 


want indexed on Yahoo or 
Google. Many applications and 


| Web browsers attempt to ac- 


cess robots.txt as part of nor- 


| mal operations. But many 
| hackers also attempt to access 


these false positives, we have a | 


this file prior to an attack as 


| part of a strategy to gather as 





| much information about a tar- 
| get Web site as they can. 


| On or Off? 


So we’re in a quandary. Turn- 


| ing off the rules that generate 
space and bandwidth | 


this alert cut down on false 
positives. But it also creates a 


| blind spot because we can no 
| longer detect any malicious 
| activity that those rules were 


designed to catch. But leaving 


| it On means accepting hun- 

| dreds of false-positive alerts 
| per hour, each of which must 
| be stored and analyzed. 


Thresholding lets the sen- 


' sors keep track of the number 


of file access attempts and 


| produces an alert only after a 

| certain number of attempts 

| have been made. The IDS ad- 

| ministrator can still watch for 
| this event but isn’t inundated 

| with all those false positives. 

| We have dozens of similar 

| alerts that fall into this catego- 





ry. Until now, we’ve had to dis- | 


able these rules. Now we can 


| re-enable them. 


Event suppression is a bit 


| different. It works by stopping 


suspicious activity from gen- 
erating alerts, without remov- 


| ing the rule from the rule base. 


This is done by suppressing 
event alerts when a user or de- 


constantly barraged by SNMP 
events generated by users and 
applications residing within 


the network operations group. 
They use SNMP to trouble- 
shoot and monitor network 
devices and servers, but hack- 
ers also use it to launch de- 

| nial-of-service attacks or to 
conduct surveillance. 

Fortunately, the network op- 

| erations center is configured 

| On a separate network. So in- 
stead of completely eliminating 

| aspecific SNMP trigger from 

| the rule base or configuring a 

| thresholding rule, we can cre- 
ate a rule to suppress these 
SNMP events from triggering if 

| they are initiated by a machine 

| with an IP address belonging 
to the operations group. If you 
use this feature, it’s important 

| to know that the suppression 

| rules are performed prior to 

| the thresholding tests. Know- 
ing that, we may combine sup- 
pression tests with threshold- 
ing rules to more accurately 
manage false positives. 

Having reduced the Snort 

| alert output, we can now focus | 

| on dealing more efficiently 

| with incident response. Today 

| the IT security team responds 

| to all events, but we’d like ana- 
lysts in the network opera- 

| tions group to also be able to 
respond. Until now we’ve 

| found it difficult to properly 

| train them. But with a poten- 
tial decrease in the amount of 

| false positives and more pre- 

| cise event generation, perhaps 

we can make this approach 

| work. This could cut down on 
late-night calls to my staffers, 

| who will be able to sleep 
knowing that our infrastruc- 

| ture is in good hands. D 


| WHATDOYOU THINK? 


This week's journal is written by a real securi- 
ty manager, “Mathias Thurman,” whose 
name and employer have been disguised for 
obvious reasons. Contact him at mathias_ 


in this tome’s nearly 1,300 
pages are some PowerPoint 
slides and policies from the 
SANS Institute Web site and 
the Department of Justice’s 
search-and-seizure hand- 
book. If you want to have a 
wide variety of information 
available in a single reference 
and don’t mind looking else- 
where for details, then this 
might be a good book to con- 
sider. It also might work well 
as an introductory text for a 
college-level computer securi- 
ty class. But for most IT secu- 
rity professionals, other titles 
probably offer more bang for 
the buck. 

- Mathias Thurman 


XP SP2 Beta Ships 


Microsoft Corp. will make the 


To find a complete archive of our 
Security Manager's Journals, go online to 
| @computerworld.com/secjournal 
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Actuate Delivers 
Easy Data Access 


Last week, business intelligence 
software maker Actuate Corp. in 
South San Francisco announced 

a new product offering easy ac- 
cess to both reporting and analyt- | 
ic operations from a single server. | 
Called Actuate Analytics, it will | 
ship generally in January and 

starts at $15,000 per CPU. 


FileNet Expands 
Portlet Support 


Enterprise content management 
vendor FileNet Corp. in Costa 
Mesa, Calif., is adding support for 
several new Java portlets to its 
applications to allow easier inte- 
gration with Web portals. The 
company said it will expand its | 
suite of portlets and offer a devel- | 
opment framework to support 

new portal computing standards, 
known as Java Specification Re- 
quest 168 and Web Services for 
Remote Portlets. The company 

also plans to support the forth- 
coming JSR 170 standard. 


Norfolk Southern 
Tracks Via Web 


Modalgistics and TransWorks, 
technology development units of 
Norfolk Southern Corp. in Nor- 
folk, Va., have created a Web- 
based application to help cus- 
tomer companies track shipments 
across all modes of transporta- 
tion. The application includes 
carrier tendering and selection, 
pickup and delivery scheduling, 
and order tracking. Automated 
back-office processing is also in- 
cluded, the company said. 


PeopleSoft Offers 
Free Training Tool 


PeopleSoft Inc. last week 
shipped a free tool that enables 
companies to plan and track the 
payback on software training 
projects. PeopleSoft RO! for 
Training identifies relevant met- 
rics and monitors them through- 
out a software implementation. 
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NICHOLAS PETRELEY 


‘The Nj 
Before 


tmare 
Stmas 


I FOUND IT DIFFICULT to decide what to write for my Christmas column 
this year. My first plan was to provide a list of gift suggestions. For 
example, Sun could benefit from a subscription to Self magazine, since the 
company seems to be having a lot of trouble finding itself on its own. 
Instead, I decided it was impossible to turn to the festivities of the holidays 
without confronting some ghosts of the year past. So, with apologies to 
Clement Clarke Moore, I offer this interpretation of his famous poem: 


COOP O OOOOH EEE HEHEHE SEH EE SOS EE EEE EH EOE ES ES EEE ED ESS COCO COPE OHS E HSE EEE TOSSES EEE EE SES ESSE SEE ET ESE ES ESOEEEEEEE ESE OSESS 


WAS THE WEEK before Christmas, 
and at the workhouse 
A few workers were griping 
an occasional grouse. 
They'd been to a meeting 
of CEO pap, 
Where they’d all settled down for a long 
winter’s nap 
And stolen a break from earning their bread, 
While visions of bonuses danced in their heads 
Then out in the hallway there arose such 
a chatter, 
I listened intently to see what was the matter. 
“A present was placed in each cube with 
great care, 
In hopes that we workers would notice 
them there.” 
So away to my cube I flew like a flash, 
In search of an envelope filled with hard cash. 


The fluorescent lights that were flickering low, 
Gave a strobelike effect to the objects below. 
Then, what to my wandering eyes should appear, 
But a navy blue envelope with my name printed clear. 
With a bit of a quiver, I almost felt sick; 

I thought for a moment it might be a trick. 

So rapid it beat as I stared at the name, 

My heart at that moment was hopeless to tame. 
My family and I were all fussin’ and fixin’, 

For a merry vacation with a heapin’ of glitzen! 
Surely a check was what beckoned and called! 
Now cash away! Cash away! Cash away all! 


As after a meal one might savor a pie, 

Before delighting the mouth — fill the nose and the eye 
— For minutes I stared at that envelope blue, 

While thinking of all of the things I could do. 

And then, in a twinkling, I felt like an oaf, 

It’s for family, you see, that I labor, not loaf. 


As I drew up my hand, and I turned it around, 

The envelope glistened where glue had it 
bound. 

It was dressed rather plain for a thing 
holding loot, 

But tradition aside, decorations were moot. 

If only it put a few toys in the sack, 

That would surely make up for the frills 
that it lacked. 

With IT positions so scarce it was scary 

It took very little to make workers merry! 


I thought as my grin was drawn up like a bow, 
It was time to stop stalling and get on 
with the show. 
Then I saw as I tore off the side with my teeth, 
They had chosen the blue to hide pink 
underneath. 
My countenance changed and I quivered like jeliy, 
When I found out my job was outsourced to Delhi. 
I carefully placed the pink slip on the shelf, 
As I desperately tried to get hold of myself. 


I tried to recall with an ache in my head, 

What during my nap the old CEO said. 

I almost gave up and went straight back to work, 
When I decided instead to go tell off the jerk. 

And holding my finger right up to his nose, 

I suggested self-love, though in words not quite those. 
The company stock rose that month like a missile, 
Then plunged as morale fell with each new dismissal. 
By next Christmas I was working again, day and night, 
As the new CEO charged with making things right. 


I truly hope that this parody inspired a few laughs 
instead of tears, and wish all of you a most joyous 
holiday season and a new year filled with blessings 
beyond anything you can hope or imagine. @ 43600 
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Prioritizing 
business projects 


By Kathleen 
Melymuka 


One Version of the Truth 

For business intelligence systems, 
the Holy Grail is to produce “a single 
version of the truth.” But getting 
there isn’t cut and dried — it entails 
painstaking data modeling, plus 
political and turf battles. Page 38 


OPINION 

Grooming the CIO’s Successor 
Norbert J. Kubilus says IT organiza- 
tions that fail at succession planning 
will falter when the CIO leaves. He 
lays out guidelines for developing 
the next CIO. Page 42 


Q&A 

BI: Last to Leave 

Data management consultant 
William McKnight talks about 
the reasons why BI is a laggard 
when it comes to outsourcing 
IT projects overseas. Page 40 





10 BOB PLANTE was 
under the gun. A big 
security and controls 
audit of CIT Group 
Inc., completed in 
September, had left a 
trail of “red marks” 
— mostly related to 
legislation such as 
the USA Patriot Act and the Sarbanes- 
Oxley Act — that had to be addressed 
immediately. While Plante had recent- 
ly reorganized his IT group to get a 
better handle on internal priorities for 
the Livingston, N.J.-based commercial 
and consumer finance company, these 
new legislative mandates were another 
story. 

“He was getting battered by the au- 
ditors and the board,” says Russ Ward, 
a senior account manager at Forsythe 
Solutions Group Inc. in Skokie, IIl., 
which helped Plante develop a frame- 
work to deal with the issues. “He tend- 
ed to run from one hole in the dike to 
the next, responding to whoever was 
screaming loudest at the time. That’s 
pretty common for most of the folks in 
his spot right now.” 

In the best of times, IT has too much 
to do, but over the past year or so, more 
and more priorities have been imposed 
from outside. Already overburdened 
IT groups must now respond to new 
legislative mandates, leaving even few- 
er resources to address pressing inter- 
nal business needs. “There certainly 
are a lot of external factors causing 
more than the normal items on the IT 
agenda,” says John Boushy, who, as 
CIO at Harrah’s Entertainment Inc. in 
Las Vegas, knows something about reg- 
ulatory requirements. 

“Priority-juggling used to be internal, 
but now we're getting hit by external 
factors,” says Jean Holley, former CIO 
at USG Corp. in Chicago. “Probably the 
biggest frustration is unfunded-but- 
mandatory things like Sarbanes-Oxley. 
These things are not optional, so how 
do you juggle those external compo- 
nents you’ve got to put in the mix?” 

“It’s frustrating,” says Marty Chuck, 
CIO at Agilent Technologies Inc. in 
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Palo Alto, Calif. “I have other aspira- 
tions, like growing the company, satis- 
fying the customer, increasing opera- 
tional efficiencies. I don’t want to be 
spending on this. It’s a necessary evil, 
chewing up resources we'd rather 
spend on something else.” 

The challenge is twofold: How do 
you prioritize these external legislative 
requirements, and how do you then in- 
tegrate those new priorities with must- 
do business projects? 

At CIT, Plante and Ward needed to 
prioritize security and control require- 
ments identified by the security audit. 
They looked at industry security and 
control standards such as Control Ob- 
jectives for Information Technology 
(known as COBIT) and ISO-17799 as 
well as legislative mandates and identi- 
fied the portions that were most criti- 
cal to CIT, such as those involving 


change control and system security and 


recoverability. Then they developed a 

_matrix to map those controls to their 
most critical systems. Finally, they 
overlayed the findings of the security 
and control audits, coior-coding each 
area red, yellow or green, indicating 
greatest to least risk (see chart below). 
At that point, priorities became clear. 

The next challenge is to complete 

the necessary compliance activity and 
still deliver what’s in the regular IT 
project pipeline. Plante manages the 
competition for resources by detailing 
the cost of required improvements so 
that he, the CFO and business unit ex- 
ecutives can decide on the proper pac- 
ing and level of expense for each. 


Shrinking Demand 

Detailing the true costs of proposed 
projects is a strategy CIO Roger Gray 
has elevated to an art form at Pacific 
Gas & Electric Co. in San Francisco, 
where the key to prioritization is to 
shrink demand. “What is unmetered is 
always overconsumed,” he explains. 
“By metering things carefully, demand 
is self-correcting. I call it the ‘Conser- 
vation of IT’ principle.” 

IT usually does a good job of laying 
out one-time costs, he says, but it 
needs to do the same for ongoing 
costs, which are often hidden in infra- 
structure and maintenance budgets. 
“We don’t hide those costs in a black 
box,” Gray says. “If operations wants a 
system, they know what the bill will be 
as a project — as well as next year and 
the year after that.” 

When the real costs are revealed, de- 
mand curtails itself and prioritizing is 
much more manageable, he says, and 
budgeting and chargeback improve be- 
cause there are no surprises. 
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Shrinking demand also means not 
going hog-wild over regulatory require- 
ments. You have to meet the law, Gray 
says, but “the challenge is to be rational 
and not go around and do crazy things.” 

To shrink regulatory demands, he 
says, be sure to define requirements 
carefully and rationally, and use ex- 
perts wisely. For example, Gray never 
uses auditors who also work as consul- 
tants to fix the problems they find. 

Your upper management should ride 
herd on regulatory issues and set pri- 
orities, Chuck adds. “If anything relat- 
ed to security, audit or Sarbanes-Oxley 
is left at too low a level, well-meaning 
people will overspend on it,” he ex- 
plains. Where they jump into the 
minutiae of compliance, a senior exec- 
utive with a broader perspective might 
realize that there are whole areas that 
don’t even need to be addressed. 
“You've got to get senior business lead- 
ers into the process or it can eat up a 
lot of time and money,” he says. 

While doing everything he can to 
shrink internal and external demand, 
Gray also focuses on productivity. “If 
we can become 1% to 2% more produc- 
tive every year, in theory we can ab- 
sorb 1% or 2% of things that come at us 
without sacrificing,” he explains. “So 
we try to get better at what we do so 
we can absorb these new require- 
ments. Every business has to do that.” 

Harrah’s IT group is doing a varia- 
tion on that theme. Boushy has invest- 
ed for years in “strategic resource aug- 
mentation” — using contracted labor 
and outsourcing to provide additional 
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skills as needed — to grow his IT ca- 
pacity dramatically. “What helped us 
get past the paradigm of how to allo- 
cate a fixed set of resources was turn- 
ing the problem sideways,” he says. “If 
I can get more resources, I don’t have a 
number-of-projects problem.” 

Because of its casino business, Har- 
rah’s operates in 13 different regulatory 
environments simultaneously, and 
each has slightly different require- 
ments. Boushy realized years ago that 
if he had to choose between meeting 
regulatory mandates and getting busi- 
ness projects done, the business would 
be poorly served. “If you’re forced to 
trade off, you may have to choose on 


Red Aiert With help from the Forsythe Solutions Group, finance 


giant CIT Group was able to establish priorities about which security problems should get 
attention first. In this simplified version of a chart for two CIT applications, the results of 

a security audit were mapped to the ISO-17799 security standard and the risks were 
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the side of the regulatory require- 
ment,” Boushy explains. “But instead 
of getting into that choice, by investing 
in resource augmentation you allow 
yourself to handle both.” 

By augmenting staff to tackle the 
business project, you enhance revenue, 
improving your financial position and 
making it easier to continue to do 
more; he says. “As result, you start to 
loosen the budgetary constraints that 
surround IT.” 

Recently, staff augmentation enabled 
Boushy to finish in six months a com- 
prehensive customer-rewards project 
that had been estimated to take nine to 
ll months. He worked with Sapient 
Corp. in Cambridge, Mass., and Infosys 
Technologies Ltd. in Bangalore, India, 
to carve the project into portions for 
internal, external and offshore people. 
“Not only did we augment from a pure 
numbers standpoint,” he says, “but 
when we went to bed, people in India 
were just getting up, so we were able 
to do in a 24-hour period almost twice 
as much work.” 

Boushy cautions, however, that staff 
augmentation is a long-term approach. 
“We worked with Sapient for five years 
and Infosys for three years prior to do- 
ing the project I described,” he says, 
adding that it takes time to develop a 
good working relationship. “If you 
don’t give it time, you're likely to hit 
more bumps in the road,” he says. 

But what if you lack the budget for 
extra resources? Boushy says if you can 
show the real value of IT investments, 
the money will be there. He’s been able 
to do that with a very robust financial- 
projection, monitoring, measuring and 
tracking capability. That enables him 
to see exactly what a project costs, 
then track the business value it creates. 
Every year he reports on how IT in- 
vestments are doing. “We're constantly 
evaluating our investment in informa- 
tion technology, just as you would 
evaluate how your stocks are perform- 
ing,” he says. “And we make decisions 
going forward based on that. IT is seen 
as investment from which we expect to 
receive internal rate of return just as 
we do from building a new hotel.” 

Tracking is essential to good priori- 
tization, Holley says. “You’ve got to 
have a way to measure projects to see if 
you made the right decisions,” she says. 
“If you don’t keep score on whether 
you got business value from projects, 
how will you know how to prioritize 
projects in the future?” @ 43236 





Melymuka is a Computerworld con- 
tributing writer. She can be reached at 
kmelymuka@yahoo.com. 
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ON SEPTEMBER STH: STEVE HABER HAD 
HIS BUSINESS TAKEN FROM HIM. 
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Snap Appliance 


Once again, data is undergoing radical changes. But this time, it’s not only about what gets 
created, it’s where and how it is protected. Whether it’s an individual, workgroup, department 
or enterprise, you can back up every last digital bit on Snap storage and file server solutions. 
Easy to implement, easy to install and easy to manage. In fact, one out of every two Network 
Attached Storage installations in the world and over half of the Fortune 500 rely on Snap 
servers to protect their critical information. 1-888-343-SNAP. www.snapappliance.com 
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Getting there 

takes more than 
sophisticated 
business intelligence 


software. Ittakes ois Bacelalianaba Si leairanraia 3 Dial tars (lela gate falas 
data quality and © 


political battles, too. ! 
| 
ALK ABOUT CHAOS. 
For decades, corporate f T | 
executives have made 
strategic business deci- 
sions based on informa- 
tion deduced from multi- 
ple reports that IT com- 
piled by summarizing sets of fre- 
quently conflicting data. 


Business intelligence systems 
promise to change that by, among pea al Pry r yg 
other things, pulling data from all in- ? 
ternal systems plus external sources 
to present a single version of the 
truth. This truth can then be deliv- 
ered to decision-makers in the form 
of answers to highly strategic ques- 
tions such as “How many customers 
spend more than $1 million with our 
company?” or “Which clients are 
most likely to respond to our latest 
marketing campaign?” 

By 2005, market research firm IDC 
projects the worldwide market for 
business intelligence software will 
total about $6 billion — up from 
$2.5 billion this year — signaling a 
voracious user appetite for the truth. 
But getting there isn’t just about buy- 
ing and deploying new software 
tools. Instead, it involves an arduous 
data-modeling effort upfront, and 
that can trigger widespread political 
battles and numerous other chal- 
lenges. Here’s a rundown of not-so- 
predictable gotchas and how some 
veteran users of business intelligence 
systems overcame them. 


RARELY, IF EVER, IS THE 

TRUTH IN PLAIN SIGHT. 

Truly valuable business infor- 

mation must be mined from dis- 

parate and “dirty” data that re- 
sides in multiple, incompatible com- 
puter applications and databases. 
Fair warning: It takes many months 
and requires paying militant atten- 
tion to detail to combine and prepare 
the source data that will ultimately 
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get you to a single version of the truth. 

Pfizer Inc. needed to pull data from 
14 systems, each of which handles a 
unique slice of the business, to come 
up with a comprehensive financial pic- 
ture of the $32 billion pharmaceutical 
giant. In what turned out to be a false 
start, Pfizer’s IT group began by creat- 
ing software interfaces to link the 14 in- 
dividual systems to a data warehouse, 
which was conceived as a single source 
of financial information. The problem 
was that business and financial terms 
were defined differently within each of 
the contributing systems. 

“You put all the data together and 
you've won the battle, but lost the 
war,” notes Danny Siegel, senior man- 
ager of business technology at New 
York-based Pfizer. “It took us four 
months just to integrate a few 
sources.” Lesson learned: Gathering 
the data in a single place is only half 
the battle. “We saw that we had to put 
in place some rigorous data standards. 
This kicked off a six-month, totally 
nontechnical effort to devise a set of 
standards that allows users to slice and 
dice data in whatever context they 
need it,” Siegel says. 

Tony LoFrumento, executive direc- 
tor of CRM at $19 billion Morgan Stan- 
ley, which created a database that pro- 
vides a holistic view of each of the 
firm’s 5 million accounts, advises oth- 
ers to pay more attention to informa- 
tion content than to its delivery. 

“People talk about business intelli- 
gence and getting to one version of the 
truth, and what they usually think 
about first is the reporting tools,” says 
LoFrumento. “The reporting tools are 
great, but without the right informa- 
tion and data infrastructure in place, 
you're just spitting back what users al- 
ready know, in a nicer format,” he says. 


THE TRUTH IS A MOVING TARGET. 

Defining standard business 

and financial terms isn’t a 

once-and-done undertaking. 

Asking the right questions is 
also an ongoing process. “There really 
never is an end to the process,” says 
Rob Cox, director of financial planning 
at Baltimore-based Erickson Retire- 
ment Communities LLC, the country’s 
largest developer of retirement hous- 
ing, with 10,000 residents and 5,000 
employees. 

Cox’s team took months to come up 
with standard definitions and reports 
as part of Erickson’s implementation of 
analytical software from Hyperion So- 
lutions Corp. But it wasn’t long after 
the software was deployed that the 
balking began. “People came out of the 
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woodwork to say they needed different 
definitions,” Cox recalls. One depart- 
ment wanted to include depreciation 
in the net income calculation, while 
another department didn’t. 

In another case, top management 
asked to have general and administra- 
tive costs broken out from the lines of 
business in which they were reported 
and instead have them recorded in a 
stand-alone manner. 

Rather than create a bunch of ad hoc 
reports to respond to every request, 
Cox set up a process under which all 
change requests are funneled to a com- 
mittee in the financial group, which re- 
views and then approves or denies 
them. Changes are then made to the 
central database so that the new types 
of reports can be produced. 

Even though the numbers may be 
broken out differently for different 
departments, they still roll up to a 
single bottom-line number for the 
entire company, Cox says. “It’s more 
work, but it’s always better to take the 
time and change things in the data- 
base. The truth is a moving target, and 
you’ve got to be willing to stop the 
presses and do the work to change the 
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database, rather than allow every user 
to make overriding adjustments on 
their reports,” he adds. 

At AXA Financial Inc. in New York, 
a dedicated data management team 
within IT is responsible for what Mar- 
vin Rafe, IT director and chief archi- 
tect, describes as “data stewardship.” 
Whenever there are discrepancies 
across various lines of business, this 
IT team takes the issues to a cross- 
departmental data stewardship team 
for resolution. 


GETTING TO ONE VERSION 

OF THE TRUTH IS A HIGHLY 

POLITICIZED PROCESS. 

There are two schools of 

thought on how to get ali par- 
ties on the same page. The first is to 
have a strong executive sponsor who 
has the clout to enforce data standards 
and the reporting of agreed-upon key 
performance metrics. 

The second, adopted successfully at 
$2.1 billion automotive retailer Pep 
Boys, is to appeal directly to end users, 
such as salespeople and managers in 
the field “who are starving for data,” 
according to Bob Berckman, director 
of database services at the 595-store 
chain based in Philadelphia. 

“Our original approach was to go to 
senior management, and they liked the 
concept of one version of the truth, but 
they couldn’t focus on it long enough, 
and after a year, it just wasn’t taking 
hold,” Berckman recalls. “Also, the se- 
nior guys were being hand-fed the in- 
formation they needed, so there was 
no need for them to go and get it.” 

So Berckman switched gears to a 
grass-roots approach, hitting up re- 
gional managers and individual store 


WHAT USERS WANT 


AT LANDSTAR SYSTEM INC., a 
transportation logistics company in 
Jacksonville, Fla., designated power 
users from the business provide 
ongoing help desk support to other 
users when business intelligence 
problems arise. The reason is simple, 
says Bob Leo, director of data man- 
agement and administration at Land- 
star. “For any BI effort to be worth 
it, you have to have the business 
community take ownership of the 
process.” 

On the IT side, technology profes- 
sionals are responsible for under- 
standing exactly what business users 
require from a business intelligence 





system. This means understanding 
the kinds of business questions they 
need to answer and the kinds of data 
that will generate that information. 

“Some of our challenge in IT has 
been being able to speak to users in 
business terms, which is very key to 
the success of a business intelli- 
gence project,” says Lec. “We in IT 
can talk about dimensions and mea- 
sures and columns and building 
cubes, but we’ve also had to learn 
how to adapt our terminology in the 
requirements-gathering process to 
talk about what the users do every 
day,” he says. 

- Julia King 





| managers for support for the now 6- 
| year-old business intelligence system. 


“If they could get accurate informa- 
tion in a timely manner, it made their 


| jobs easier,” so their incentive to make 
| the project work was greater, Berck- 


man points out. 
Before business intelligence sys- 
tems, Pep Boys managers needed to 


| call the store managers in their regions 


for financial information. Each store 
reported differently, plus they reported 
at different times, making an accurate, 
comprehensive regional sales report 
nearly impossible to put together. Now, 
all stores report data the same way at 
the same time. “Everyone is looking at 
the same numbers. There is no confu- 


| sion. We have one version of the 
| truth,” says Berckman. 


THE WHOLE TRUTH IS BEST DE- 
LIVERED IN CHUNKS AND DIS- 
CLOSED AT PRESCRIBED TIMES. 
“A few years ago, we started 
with wanting all data as real- 
time as possible,” recalls Scott Hicar, 


CIO at disk drive manufacturer Maxtor 


Corp. “But we learned that you really 
only want to publish information at the 


| rate it can be understood and used in 


decision-making. To have a new ver- 
sion of the truth every 15 minutes 
doesn’t help anybody,” he says. Milpi- 
tas, Calif.-based Maxtor had a major 
snafu with managers reading real-time 
updates of financial and operational 
reports at different times of the day. 
Of course, the numbers varied, rep- 
resenting multiple versions of the 


| truth, which created chaos, not clarity. 


The solution was to publish updates at 
specified times throughout the day. 
Finally, IT shouldn’t make any as- 


| sumptions about the kinds of informa- 
@eeeseeeeevoeaoe ees eseeeeeeeeeoeeoseeeeeeeseeeeee ee 


tion business users will want next — 
another misstep Maxtor made early on 
in its business intelligence project. 
“Once we saw where the business 
was going and the kinds of questions 
they were asking, we figured they’d 
want to see more detailed stuff, and we 
started building data marts based on 
that,” Hicar recalls. “We tried to... 


get them to higher-value information 


faster, but we learned that IT can’t give 
them the truth.” In other words, IT 
tried to rush the delivery of complex 
information before the users were 


| ready. They needed time to absorb 


business intelligence, one step at a 


time. @ 43119 
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McKnight Associates Inc., Dallas 
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>: Founded his consulting firm six 


years ago and specializes in data warehousing and CRM 


initiatives. He’s a columnist for Data Management Re- 


view and an industry conference speaker and teacher. 


Companies are outsourcing IT initia- 
tives overseas to save costs, but is it 
worth it to send business intelligence ac- 
tivities offshore? The costs and benefits 
of such programs are difficult to pin 
down even when they’re kept in-house. 
Data management consultant William 
McKnight, president of McKnight Associ- 
ates Inc., says the offshoring trend will 
likely hit BI in the next few years. In the 
meantime, he recommends that compa- 
nies take it slow and stick to an on- 
shore/offshore model, in which the proj- 
ect managers, integrators and architects 
are homebodies so they can maintain 
some control over the projects, 

while only routine tasks are 

done offshore. Jean Consilvio 

talked with McKnight about 

how companies can assess 

their readiness to outsource such a core 
business function. 


Why not send BI overseas? It’s probably 
not a good first target for offshoring. 
Data warehousing and BI is very itera- 
tive and business-focused — it’s not 

a technical exercise. That’s why we 
got into so many failures early on, 
because we treated it like a technical 
exercise. 

It’s important that most of the [staff] 
on the project have business knowl- 
edge. And it’s also a best practice to 
have a small team of five to seven that 
acts as a SWAT team and continually 
executes on deliverables, as opposed to 
— what I think is a poor practice — 








having a 25- to 50-person data ware- 
housing team. Until you have your 
processes efficient, having that many 
people is just adding to inefficiency. 
The offshore model makes sense 


| when you have larger projects. If you 


consider that maybe 2005 or 2006 will 
be about when offshoring best prac- 
tices emerge for technology-related 
projects, you’re probably looking at an- 
other year or two before offshore BI 
has best practices. 


How are companies deciding whether it’s 
financially worthwhile to go offshore? How 
you deliver is a TCO ques- 
tion, it’s not an ROI ques- 
tion. It has everything to do 
with the investment, but the 
business targets don’t 
change, regardless of the delivery 
mechanism. And so offshoring, if 
viewed as a lower-cost approach, will 
increase your ROI because you'll have 
lower costs. But it won’t do much for 
your returns except put them at a 
slightly higher risk, because the deliv- 
ery may not work as expected unless 
you employ best practices. 


What are some of those best practices? Set 
up tight specifications, and don’t ex- 
pect too much first off. I would recom- 
mend starting with a staff-augmenta- 
tion-type approach and growing from 
there. Set up service levels, and set 
your expectations appropriately and 
ease into it. Keep an onshore presence 





for the business knowledge. 


Why keep that onshore? BI is very busi- 
ness-focused. We develop something 
quickly, we put it out there and get 
user feedback. We enhance it, we im- 
prove it, and then we move on to the 
next target and do the same thing with 
that, while continually supporting 
what we’ve put into production. So 
that life cycle is very quick-turn. That 
means the development team has to be 
reactive to the feedback that we get on 
a day-by-day basis. A lot of the feed- 
back comes in the form of business 
feedback, and it has to be translated to 
technical specifications. 

If you’re going to have offshore BI, 
you're probably looking at a best prac- 
tice of doing that only if you have 
longer-term projects with more stable 
requirements. And you must have a 
willingness to specify those require- 
ments to the degree necessary such 
that a technical person can act upon 
them without too much knowledge of 
your business. 


What are the risks in offshoring BI? I think 
the biggest risk is that ETL [extract, 
transform and load], which is a huge 
part of data warehousing and BI, is 
vastly underestimated. And it’s not 
solely a technical exercise. It has an 
equal component: business. So those 
rules for how the data should look for 
users should come from users. And 
you enhance the risk that the users will 
not be as involved as they need to be 
when you go offshore. 

All risks are going to be in the se- 
mantic gap of what is expected and 
what is delivered. This is why the 
benchmarks and the preagreed criteria 
are so important to establish upfront. 

Also, know how you're going to exit 
a contract before you enter. 


How long are contracts? A company has 
to be very careful getting into off- 
shoring of BI because it’s very fluid, it’s 
ongoing in nature, and it never ends. 
So to think that [a contract is] going to 


+|: Last to Leave 


Consultant urges a go-slow approach to sending 
business intelligence functions offshore. 








have a start date and an end date that’s 
firm is probably going to lead [the rela- 
tionship] in the wrong direction. And 
don’t forget about making arrange- 
ments for ongoing support. 


Should companies evaluate tools when going 
offshore? Tools are a means to an end, 
and you're negotiating for service de- 
livery. I would want to audit what tools 
they’re using, simply because if things 
go wrong and I need to take that on- 
shore, I would want to feel comfortable 
that scalable tools were being used. 
But we also don’t want to try to re- 
engineer what the offshoring company 
is good at. 


What skills do the in-house folks need to run 
offshore BI? The main skills are systems 
integration, project management, and 
managing to delivery. Somebody who’s 
not a technician can perhaps do a bet- 
ter job at managing an outsourcing re- 
lationship, because they’re managing to 
business deliverables. The same is true 
for work that’s done in-house: Focus 
on the business deliverables. @ 42967 
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the Future of IT 


Strategic problem-solving and peer networking with the nation’s IT leaders 
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Conference sessions will cover these critical areas: 

¢ Extending Data Management, Enterprise Integration and Web Services 

¢ Creating a Next-Generation Infrastructure, Reducing Complexity and Enhancing Business Value 
Charting New Directions in IT Governance, Regulatory Compliance and Project Leadership 
¢ Advancing Security and Business Continuity 


Computerworld’s Premier 100 IT Leaders Conference is a dramatically different, high impact 
executive event. Now in its 5th year, this annual conference brings together hundreds of senior 
IT executives for a compelling series of high-level discussion panels, presentations and peer 
networking activities. 


The Premier 100 IT Leaders for 2004 will be announced and profiled in our January 5, 2004, 
issue of Computerworld and honored during a special ceremony at the March 7-9, 2004, 
conference. Rich with peer advice and real-world case studies, the conference content is 
built directly from user feedback provided by the honorees themselves. Our editors design a 
no-nonsense agenda that features Premier 100 honorees and other IT leaders focusing 
exclusively on top-of-mind issues and concerns of senior IT management. 
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LARRY BUETTNER 
started as CIO at 
Wheels Inc., a privately 
held company in Des 
Plaines, lil., that han- 
dies corporate leasing 
and fleet management 
for about 240,000 ve- 
hicles. He previously 
was president of Anexsys LLC, a systems 
where he helped implement the Electron- 
ic Federal Tax Payment System for the 
IRS in 1995. Buettner, 51, spoke with 
Jean Consilvio about his new job. 


What lured you to this company? They 
are very customer- and quality-focused, 
and technology is a big part of what 
they're trying to do. It's got about 550 
employees [including 100 in IT] and 
$1.5 billion in sales - the breadth and 
depth of a large company, but with a 
lot more personal touch and a clearer 
ability to contribute to its success, which 
sometimes gets lost in the shuffle at a 
large company. 


What's your IT priority? We have a tre- 
mendous amount of data that we have 
accumulated from our fleet users, so it’s 
how we can make that data available 
and usable at the fleet manager level to 
contro! costs and improve services. But 
[it's] also using new technology to ex- 
tend services down to the driver, whether 
that be wireless or whatever we think of. 


Can you give an example? Companies 
that have salespeople remotely dis- 
persed need to keep in contact with 
them. We make sure that the vehicle is 
providing what's needed and we can 
communicate to resolve any service is- 
sues as quickly as possible. 


What are your challenges? When you 
have a massive amount of data, how 
you organize it and use it is the biggest 
challenge. . .. So moving from big data- 
bases to data marts. 


Do you have a database in place? A very 
focused and deep system that has been 
tailored to the fleet business. We're ap- 
proaching 65 years’ existence as a com- 
pany, so it incorporates all the business 
rules we've collected over that time. 
That's what makes us valuable to our 
customers: Our understanding of the 
business is well captured in the system. 
@ 43613 
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Grooming the 
CIO's Successor 


NFORMATION TECHNOLOGY organizations 

that fail at succession planning falter when the 

CIO leaves — which occurs with greater fre- 

quency than with any other top executive posi- 

tion. Although it appears to have stabilized in re- 
cent years, the average CIO tenure remains between 18 
and 36 months. In comparison, the average tenure of a 
chief financial officer is closer to five years. 


Understandably, with 
myriad IT issues and proj- 
ects competing for atten- 
tion, succession planning 
isn’t high on the CIO prior- 
ity list. That’s a human re- 
sources function, right? 

Maybe it is fora CIO ina 
company that has a formal 
succession-planning 
process, but less than one- 
third of U.S. companies ac- 
tually do executive succes- 
sion planning. 

Even when HR takes the 
lead, the CIO is an integral part of the 
succession-planning process. In fact, 
it’s the CIO’s responsibility to ensure 
that the company has the IT leader- 
ship and management talent to sustain 
growth and profitability if the CIO 
should make a sudden departure. 

An IT succession plan is closely re- 
lated to the IT strategic plan, which 
sets forth the direction of the IT orga- 
nization and how it aligns with the 
company’s business goals. Simply put, 
the succession plan specifies how the 
human resources in the IT organiza- 
tion will evolve to achieve that strate- 
gic vision. 

The first step in succession planning 
is to predict the technology leadership 
and business management talent that 
the IT organization will need three to 
five years out. Next, come up with a list 
of qualifications for the future CIO and 





key IT managers in terms 
of experience, knowledge, 
skills and abilities. 

Then, each member of 
the current leadership 
team should be compared 
against these qualifica- 
tions. Because of the sensi- 
tivity of the subject, the 
CIO may consider engag- 
ing outside assistance. 
This phase can be accom- 
plished in about four to six 
weeks, involving one to two 
days per week of effort. 

The next step is for the CIO to iden- 
tify one to three potential successors 
(either internal or external) and to 
evaluate each one’s level of readiness 
to move into the CIO role. This effort 
should be repeated for the next level 
down in the IT organization as well. 

While the CIO owns the succession- 
planning process, HR’s assistance is 
invaluable in helping to groom poten- 
tial successors. Working with HR, the 
CIO should prepare an individual de- 
velopment plan for each candidate. 
The plan should detail how that per- 
son will acquire the requisite experi- 
ence, knowledge, skills and abilities to 
move up in the IT organization. A pe- 
riodic progress review is also neces- 
sary — at least annually, but every six 
months is better. 

There are several ways to develop a 
succession candidate. One is formal 





training to learn more about what it 
takes to be a CIO and how to prepare 
for this position. Options include 
seminars and courses offered by the 
American Management Association, 
the intensive nine-month Regional 
Leadership Forums sponsored by the 
Society for Information Management, 
or one of the CIO “boot camps” spon- 
sored by Gartner and others. 

But formal training is only part of 
the process. Candidate development 
often includes planned job rotations 
within the IT department — for ex- 
ample, senior directors rotating 
through computer operations, appli- 
cation development, telecommunica- 
tions and planning functions — as 
well as opportunities to gain experi- 
ence in other departments, such as fi- 
nance and administration, or in spe- 
cific business units. Also, mentoring 
candidates in areas such customer 
service, vendor management, con- 
tract negotiation, business consulting 
and project management can help 
round out their skills. 

Some CIOs may feel threatened by 
the concept of CIO succession plan- 
ning, viewing the succession candi- 
dates as a replacement threat rather 
than part of a backup plan for orderly 
succession. But developing one or 
more strong candidates demonstrates 
that the incumbent CIO is concerned 
about the continuity of IT leadership 
and about protecting the company’s 
technology investment. Having a 
ready successor may also allow a CIO 
in a larger or growing enterprise to 
move into another executive role — 
without having to leave the company 
or leave the IT organization with weak 
leadership. @ 43409 
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the first event of the year to examine the most critical 
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Principal Consultant Software 
Engineer will design and devel- 
op N-tier web-based systems for 
Company and its business units, 
and trading floor systems for 
Company's fixed income, for- 
eign exchange, and syndicate 
businesses. Will research, 
design, and develop computer! 
software systems in conjunction 
with hardware product develop- 
ment. Will analyze software 
requirements to determine feasi- 
bility of design within time and 
cost restraints. Will utilize ASP, 
Java, C++, Visual Basic, MTS, 
MS SiteServer (LDAP, Content 
Management and Publishing), 
Visual Basic For Application (for 
Excel integration), MSMQ 
Library, MQ Series API, JMS. 
and other high-level technolo- 
gies in performing software 
design anc development duties. 
Requires Bachelor's or equiva- 
lent in Computer Science. 
Computer Applications, Engin- 
eering, Math, or Physics and five 
(5) years in job offered OR five 
(5) years experience in multi- 
tier application development OR 
Master's or equivalent in 
Computer Science, Computer 
Applications, Engineering, Math 
or Physics and three (3) years 
in job offered OR three (3) years 
experience in multi-tier applica- 
tion development. Candidate 
must also possess demonstrat- 
ed expertise creating ActiveX 
COM objects compatible in a MS 
Transaction server environment 
using VB and VC++; demon- 
strated expertise in development 
and integration of N-tier client 
server/database applications 
using MFC, Sybase, and Oracle; 
and demonstrated expertise in 
design and development of N- 
tier web applications on Win- 
dows NT using MS SiteServer 
and ASP (Java Script/VB Script) 
Salary: $90,000/yr, M-F, 9AM- 
5PM. Send 2 resumes to Case 
#200202314, Labor Exchange 
Office, 19 Staniford St., 1st fl 

Boston, MA 02114. EOE 
Applicants must be U.S. work- 
ers eligible to accept full-time 
employment in U.S 
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SR. DATAWAREHOUSE CON- 
SULTANT. Design, create, 
implement & maintain dataware- 
housing applications & systems; 
undertake performance tuning, 
& systems admin. of large data- 
marts & datawarehouses using 
Oracle and Hyperion Tools 
Build datawarehouses & data- 
marts on MDDB's (Multi Dim- 
ensional Databases), ROBMS 
and OLAP technologies; install 
Hyperion products. create 
Oracle repositories for same; 
perform Extraction, Trans- 
formation & Loading ("ETL") 
tasks. REQUIREMENTS: Bach. 
Degree in Comp Sci or Engrg 
PLUS 3 yrs. in job or 3 yrs. as 
Datawarehouse Architect or 
Database Admin. incl. 2 yrs 
designing & building dataware- 
houses & datamarts using 
Oracle, Essbase, Integration 
Services, Hyperion products, 
and Business Objects. Submit 
CV to Coregenix, Inc., Attn 
Shireesh Bhatnagar, 7806 
Garden Bend, Sugar Land, TX 
77479. Fax: (281) 545-9003 
Email 
Shireesh@coregenix.com 


Computer - Cyber Technology 
Group, Portland, Maine, needs 
experienced Programmer 
Analysts having a bachelor's 
degree or equivalent with mini- 
mum 2 years of progressive 
work experience in client server 
technologies, developing sofi- 
ware applications using Oracle, 
SQL Server, ASP, Developer/ 
2000, Visual Basic, Java 
Informatica Power Mart 
Knowledege of Data Loading 
techniques using SQL loader 
and Datawarehousing concepts 
is a plus. Please maii your 
resume to Cyber Technology 
Group,HR Department, 480 
Congress Street,Ground 
Floor,Portland, ME 04101 


KSoft Systems Inc. (NJ, DE 
PA) need Programmer-Analyst 
Sys Analyst/S/w Engrs w/2-5 yrs 
exp and C, C++, Java, Java 
Script, EJB, XML, VB, VC++ 
Unix, PL/SQL, ASP, SAP R/3. 
SD, MM, Fi, ABAP/4, ALE/EDI 
BW. PeopleSoft Oracle, 
Sybase, MS-SQL Server. Must 
have Bachs/Masts or Equivit. in 
Engg/Sci Tech/Commerce or 
Related Field. Reply to 
hr@ksoftglobal.com. 


Sr. Prog/Analysts: manage 
teams to analyze, design and 
maintain appls using Java 
HTML, VB, ASP, MS Access etc 
under UNIX/Windows os; cre- 
ate/modify business documents: 
using Smart Forms and SAP 
Script analyze business 
processes to determine require- 
ments; implement applis and 
perform strategic planning and 
operations support; provide end 
user training. Require a B.S. or 
foreign equivalent in CS/Engg 
(any branch) with 3 yrs exp in IT. 
High salary. F/T. Travel 
involved. Resume to HR 
Smartsoft International, inc 
4898, South Old Peachtree Rd 
Norcross, GA 30071 


Programmer Analys: (2 posi- 
tions) Analyze reqmts, recom- 
mend dsgn, dvip navigational 
structures, perform advanced 
web/internet prgmg & digital 
imaging using knowl of C, C++ 
Java, computer graphics, net- 
works & system s/ware. Bach or 
equiv in Comp Sci/Engg, Info! 
Systems, Electrical, Electronics 
or related Engg. 2 yrs exp in job 
offd or as Computer software/IT 
prof! using above computer 
skills. 40hr/wk, 8a-5p. Resume 
to IT Group, Inc, 3645 Bridge 
Mill Ct, Norcross, GA 30092 


Computerworld 


SOFTWARE ENGINEER (2 
positions) to provide on-site con- 
Sultancy in design, develop- 
ment, analysis and testing of 
web-enabled applications soft- 
ware using Visuai C++, Java, 
PL/SQL, JSP, JavaScript, 
HTML, XML, Oracle, ASP, VB 
Script, TCP/IP, HTTP and Visual 
InterDev in UNIX and Windows 
environment; develop applica- 
tions with MFC, .Net, C#, 
ASP.NET, ADO.NET, Active-X, 
COM and XML; develop embed- 
ded based system using WinCE, 
pSOS and similar RTOS; use 
ADABAS/Natural languages 
ISO implementation and digital 
video-audio fields. Require 
Bachelor's in Computer/ 
Electronics Engineering and five 
years experience in the job 
offered or any experience pro- 
viding skills in described duties. 
40% travel required to client 
sites within the United States 
Salary: $67,000 per year, 40- 
hour week, M-F. Mail resume to 
President, K2 Technologies 
Inc., 2107 Franklin Drive 
Papillion, NE 68133 


Design Engineers (ASIC/ 
FPGA): Design, develop, code, 
test and implement Hardware 
Systems & Computer Chips in 
Verilog, VHDL, Specman utiliz- 
ing ASIC/FPGA design tools. 
Peri, Unix. C, Assembler & rel 
tech. Prevailing wage & benefits. 
Send resume to HR, 5555 
Oakbrook Parkway, Ste. 280 
Norcross, GA 30093. EOE 


Prog/Analysts to analyze 
design, develop and implement 
client server, web applis using 
C, C++, Java, Swing, XML 
HTML JDBC HTML 
JavaScript, JSP, ASP, EJB 
J2EE Oracle, PL/SQL 
Websphere, Weblogic under 
UNIX/Windows OS; documen- 
tation program development 
logic, coding and corrections; 
provide customer support and 
troubleshoot. Require: BS or for- 
eign equiv. in CS/Engg.(any 
branch) with 2 yrs of exp. in IT. 
Travel Involved. Comp.Sailary. 
F/T. Resumes to HR 
SynergyAmerica, Inc., 6340 
Sugarloaf Parkway, Ste 140 
Duluth, GA 30097 


Technical Recruiter: Broomall 
PA. Shortlist candidates from 
d/base & internet search, techni- 
cally eval candidates qualif & 
exp, conduct tech'! test & inter: 
views, conduct ref check, client 
interaction & Feedback, main 
tain documentaion w.r.t. employ- 
ees, dvip new clients for place- 
ment, negotiate compensation. 
recruit & place qualified candi- 
dates w/clients. Must have 
degree w/min 3 yrs exp in IT 
Technical Recruitment. M-F, 40 
hrs/wk. Send resume to Hera 
Tech inc., 838 Sussex Bivd 
Broomall, PA 19008 


Vice President, Network 
Engineer: Must have bach- 
elor's degree in business or; 
computer information sys- 
tem. Location: Wilmington, 
DE. Fax CV to Brandywine 
Medical Management at 


302-984-2575 


InfoWorld 


Network World 


iIT|careers.com 


Software Engineer-Scientific - 
Design, & develop sw for mtls 
char & Xstlog. Create GUI & sci 
code to conduct computations 
req. for XRD. Create Xstlog 
tools & perform cust support 
Require PhD or equiv. in Chem., 
Phys or Mat. Sci. Hands-on 
exper with the xprmnti/comp 
tools of XRD incl single xstl, 
quasi-periodic & polyxstin mtls. 
Proficient VB, Java, C, C++ 
Need 6 yrs work/ed combined; 
exprnc in algorithm dev., graph- 
ics & web programming & 
applets (exprnc to be proven by 
programs submitted); demon- 
strate ability to perform adv. 
research through publs_ in 
referred sci journals. Salary 
$80K. Respond: PO Box 791, 
Livermore CA 94550. Interview 
& Loc: Livermore, CA. 


SOFTWARE ENGINEER to pro- 
vide on-site solutions for object 
oriented design for client/server 
and web based software applic- 
tions using ASP.Net, C3, 
VB.Net, J2EE, VB Script, Java 
Script, HTML, XML, XSL, Web 
Services, SQL Server, Oracle, 
Access, Visaul Basic, C/C++, in 
Windows and Web Reports 
Require B.S. in Information 
Systems/Computer Science and 
six months experience in the job 
offered, or any experience pro- 
viding skills in the described job 
duties. Coursework must include 
e-commerce systems and web- 
site management. 40-hour 
week, M-F, competitive salary 
and benefits. Apply with resume 
to: Director of Information 
Systems, Warranty Acceptance 
Corporation, 4400 Govt. Bivd. 

Mobile, AL 36693 


Computers-Programmer Analy- 
sts needed. Seeking qual. candi- 
dates possessing BS or equiv 
and/or rel. work exp. Part of the 
req. rel. exp. must include 3 yrs 
working with Cognos, Oracle 
Database and Forms/ Reports & 
Livelink. Duties include: Design 
software architecture & develop 
software products; Provide user 
support; Analyze data require- 
ments & use case development 
for software solutions; Work with 
Java, Cognos, XML, Oracle 
Database and Forms/Reports 
ETL tools, Asynchronous Mess- 
aging and PJC Development 
Fwd. resume & ref. to TOSS WA 
Corporation, Attn: HR, 1000 
Louisiana, #6800, Houston, TX 
77002 


Data Communications Analyst 
Research, test, evaluate and 
recommend data communica 
tions hardware, software and 
upgrades. Send resumes listing 
position to: Human Resources - 
Data Communications Analyst 
Position, 4636 Hilton Corporate 
Drive, Columbus, Ohio 43232 


EOE/F/M/V/D/Legal workers 


only please. 


Seeking qualified applicants for the 
following positions in Memphis/ 
Collierville. TN: Senior Technical 
Analyst Research, evaluate 
implement and coordinate 
changes to computer systems/ 
applications. Requirements: Bach- 
elor’s degree or equivalent in com- 
puter science, math, engineering 
or related field plus 5 years of 
experience in systems/ applica- 
tions development, including pro- 
gramming. Experience with IMS 
DB/DC, Cobol Il and TSO also 
required. “Master's degree in 
appropriate field will offset 2 years 
of general experience. Submit 
resumes to Sibi George, FedEx 
Corporate Services, 1900 Summit 
Tower Bivd., Suite 1400, Orlando, 
FL 32810. EOE M/F/D/V. 


Network Programming Engineer: 
Major responsibilities include’ 
setting up Internet servers & set- 
ting up networks. Analyzing user 
needs and developing software 
solutions. Developing electronic 
systems for commercial use 
Designing, programming and 
implementation of e-commerce: 
applications. Bachelor's Degree 
in Engineering, Computer 
Science or Telecommunications 
Master's Degree in Management 
Information Systems or Comp- 
uter Science. At least two years 
of experience in network pro- 
gramming, Microsoft transaction 
servers and web application 
development. Experience in 
using COM/DCOM components 
in Windows environment. Must 
have proof of legal authority to 
work in the United States on a 
permanent basis. Contact 
President, Keepflo Technologies, 
1549 Fencorp Drive, Fenton MO 
63026 


F/T Instructional Technology 
Support Specialist. Responsible 
for performing and arranging 
repair and replacement of tech- 
nology equipment and network 
in the assigned division 
Research and develop solutions 
to hardware/software issues. 
Educational background must 
have included training in basic 
network functions, hardware and 
software, Power Quest Deploy 
Center, Windows CE/IPAQ sup- 
port, configuring wireless 
802.11b technology, Banner, 
Peoplesoft and Windows 2000 
Server. Must have a BBA in 
Computer Based Information 
Systems. Salary: Competitive 
Send resumes to: Dr. Dwight 
Call, GA College & State Univ. 
CBX 049, Milledgeville, GA 
31061 


System Analysts to analyze, 
design and implement ecom- 
merce and other solutions using 
SAP R/3, ALE, IDOC, EDI 
Gentran, Mercator on Unix/ 
Windows OS; perform gap 
analysis of customer EDI reqs 
and business appls; create/ 
maintain basic EDI Maps, EDI 
transactions; troubleshoot EDI 
errors; install/configure Gentran 
Server; document program 
development process. Require 
BS or foreign equiv. in CS/Engg 
(any branch) & 2yrs exp. in IT. 
Travel involved. High Salary. 
F/T. Resumes to: HR, Global IT 
Solutions USI Inc., 600 
Stevens Port Drive, Ste 125, 
Dakota Dunes, SD 57049. 


Seeking qualified applicants for 
the following positions in Mem- 
phis/Collierville ™ Senior 


Project/Process Analyst. Per- 
form planning and analysis for 
complex projects, processes 
and/or ongoing programs. Req- 
uirements: Bachelor's degree or 
equivalent in business, computer 
science, MIS or related field plus 5 
years of experience in planning, 
project management or process 
analysis of IT projects. Exper- 
ience with CVS also required 
“Master's degree in appropriate 
field will offset 2 years of general 
experience. Submit resumes to 
Sibi George, FedEx Corporate 
Services, 1900 Summit Tower 
Bivd., Suite 1400, Orlando, FL 
32810. EOE M/F/D/V. 


Deployment Engineer to analyze 
computer sys & provide installa- 
tion of wireless comm. s/w apps 
& sys on client sites & 
install/upgrade/troubleshoot s/w 
apps & setup comm connectivity 
betw 3rd pty h/w sys. 2 yrs exp. 
& 50% int'l travel req'd. Send 
resume & cover letter via mail or 
fax to Lightbridge, Inc. 320 
Interlocken Parkway, Broom- 
field, CO 80021. FAX: 303-381- 
5500 (Job #1465.0121) 


December 22, 2003 


SENIOR SYSTEMS ANALYST 
to analyze, design, develop, 
test, enhance and maintain 
client/server and web-based 
application software using C++, 
Java, EJB (J2EE), JSP, 
JavaScript, Struts, Serviets, 
XML, XSL, XSLT, TopLink & 
Rational Rose (UML), as well as 
automated testing tools includ- 
ing WinRunner, LoadRunner & 
QA Run on Solaris, HP-UX, 
Linux and Windows 2000/NT/XP 
platforms. Require: B.S. degree 
in Computer Science, an 
Engineering discipline, or a 
closely related field with 2 yrs of 
exp in the job offered or as a 
Programmer/Analyst. Extensive 
travel on assignment to various 
client sites within the US is 
required. Competitive salary 
offered. Send resume to: John 
Watson, Venturi Partners, Inc., 
9428 Baymeadows Rd, Ste 500, 
Jacksonville, FL 32256; Attn 
Job VK 


Puzzled? 


itcareers.com 
can solve the 
labyrinth of 
job hunting by 
matching the 
right IT skills 
with the right 
IT position. 


Find out more 


www.itcareers.com 
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PROGRAMMER/ANALYST- 
Philadelphia PA. Analyze 
design, program, implement & 
support advanced computer 
applications utilizing JAVA 
based Bluestone Software 
Java, Java Script, ODBC 
HTML, C & C++ under UNIX 
&/or Windows operating envi- 
ronment for client/server &/or 
internet-related applications 
Analyze & synthesize business 
req. reviewing client's existing 
systems. Define system req. & 
interfaces, test systems for com- 
pliance. Responsibie for system 
installation. Manage software 
development projects generat- 
ing resource req. & implement 
schedules. $60,000/yr. 40 hrs/ 
wk. Req. Bachelors in Comp. 
Sci., MIS, or Engg (Computer) 
plus 1 yr exp Contact 
International Systems Techn- 
ologies Inc., 1812 Front Street, 
Scotch Plains, NJ 07076 


Prog. Analysts to analyze 
design/develop s/w appls using 
Java, JavaScript, VBScript, ASP, 
HTML, Weblogic, Oracle, SQL. 
COBOL, DB2, CICS under 
Windows, UN!X & MVS OS; per- 
form unit, functional, integra- 
tion, regression and systems 
level testing; analyze user reqs 
prepare design documents 
develop & enhance online & 
batch programs; implement 
install, test, debug and modify 
new/existing appis. Require: BS 
or foreign equiv. in CS/Engg. 
(any branch) & 2yrs exp. in IT. 
Travel involved. High Salary 
F/T. Resumes to: HR, Global IT 
Solutions USI Inc., 600 
Stevens Port Drive, Ste 125 
Dakota Dunes, SD 57049 


Megatech International is a 
small but fast growing IT compa- 
ny. We have several openings 
for software/project engg, sys- 
tem analysts. Candidates must 
have MS/BS degree or equiv 
with exp. Attractive wage plus 
full benefits. Travel maybe 
required Please apply at 
jobs@megatech.com EOE 
Infomerica is looking for sys- 
tem/programmer analysts, soft- 
ware/project engineers & com- 
puter consultants working at dif- 
ferent sites (travel required) 
Candidates must have BS with 
1-year exp. in IT fields. Skills of 
Oracle, Informix, Java preferred 
Send resumes to info@infomeri- 
cainc.com EOE 


Programmer Analyst: Plan 
develop, test and document 
computer programs. Send 
resume listing position sought 
to Human Resources 

Programmer Analyst Position 
4636 Hilton Corporate Drive 
Columbus Ohio 43232 
EOE/F/M/V/D/Legal workers 


only please 


S/W Localization Engr 
Real Idea is hiring engrs to 
evaluate localized s/w inter- 
face & h/w. Min reqt: BSCS 
+ 2 yrs s/w dev exp. Job 
duties listed on 
www. realidea.com/careers. 
Send resume to. rfi- 
jobs@realidea.com or 1720 
S Amphlett Bivd, #255, San 
Mateo, CA, 94402 


iT/careers.com 


Application Development Anal- 
yst - AstenJohnson, Inc. is seek 
ing qualified applicants for posi- 
tions at the company's North 
American headquarters in 
Charleston, South Carolina 
The position's role is to design. 
configure, and deploy the 
Documentum 5 and eRoom 7 
platform for content manage- 
ment and business collabora- 
tion. Requires bachelor’s degree 
or foreign degree equivalent in 
Business, Information Manage- 
ment or related field and rele- 
vant applications develop- 
menvdeployment experience 
using Documentum and eRoom 
solutions. Apply to: Connie 
Wilson, Human Resources 
Team Leader, AstenJohnson 
Inc., 4399 Corporate Road 
Charleston, SC 29405 


Prog. Analysts to analyze. 
design, develop appis using: C 
VB, JavaScript, HTML/DHTML 
EJB, JSP, ASP, Serviets, UML 
Oracle, SQL under Windows 
OS; perform initial study of req 
and provide feedback; provide 
on site naintenance support 
debug, modify, fine tune and 
perform code _ optimization 
Require: BS or foreign equiv. in 
CS/Engg.(any branch) & 2 yrs of 
exp. in IT. High Salary. Travel 
Involved. F/T. Positions avail- 
able in Elgin, IL and Lower 
Gwynedd, PA. Resume to: HR 
Fourth Technologies, Inc., 1108 
N. Bethlehem Pike, Suite 8 
Lower Gwynedd, PA 19002 
Specify location desired on 
resume 


Programmer/System Analyst 
wanted by Technical Consulting 
Co in CA to review comp systm 
capabilities, workflow & limita- 
tions to determine if requested 
s/ware dvipmt & modifications 
are possible within systm. Dsgn 
modifications & upgrade existing 
s/ware systm in UNIX envrmt. 
Must have Bach or equiv in 
Comp Sci & 2yrs exp in job offd 
or in related position in prgmg 
systm analysis or as Network 
Administrator. Respond to Mr. 
Manuel Quiogue, VP, Tech 
Pacific Corp, 813 Ram Lane 
Foster City, CA 94404. No calls 


Quality Assurance Engineers 
needed. Seeking candidates 
possessing BS or equivalent and 
relevant work exp. The relevant 
work experience must include 3 
years working with Microsoft 
Windows and Unix. Duties 
include: Designing and imple- 
menting quality control tests, pro- 
cedures and standards, Plan and 
direct activities concerned with 
development, application and 
maintenance of quality standards 
for software products. Work with 
Visual Basic, Microsoft Windows 
Unix, Oracle, MSQL Server Win 
Runner and TestTrackPro. Mail 
resume, references and salary 
requirements to: Datacert, Inc 
3100 Timmons Lane #310 
Houston, TX 77027 


Software Engineers needed 
Seeking qual. candidates pos- 
sessing MS or equiv. and/or rel 
work exp. Exp. must include 2 
yrs working with Linux & Peri 
Travel as required. Duties 
include: Design, create, & modi 
fy computer programs; Maintain 
web based interface; Collect & 
analyze user requirements. 
Work w/ Linux, Perl, PHP, 
MySQL. Send res., ref. & sal 
req. to Lindows.com Inc., Attn 
Webdev 01, 9333 Genesee 
Ave., 3rd Fir, San Diego, CA 
92121 


Computerworld 


Mercury Interactive is the global 
leader in business technology 
optimization (BTO) software. Our 
integrated suite of enterprise testing, 
production tuning, and application 
performance management solutions 
helps companies fully unlock the 
value of their IT investments. With 
Mercury Interactive, customers 
can measure the quality of their 
iT-enabled-business processes 
maximize technology and business 
performance at every stage of the 
application lifecycle, and manage 
heir IT operations for continuous 
improvement. 
Mercury Interactive Corporation 
has opportunities available at our 
worksites throughout the US 
including Sunnyvale, CA; Boulder, 
CO; Bellevue, WA; for the following 
positions (various levels/types) 
* Softy gine ncluding 
Consultants, Qu: Assurance 
vit 
* Systems Analyst 
(& Consultants) 
+ Database/Systems Administrators 
IT Managers 
° Technical Course Developers 
¢ Vice President, AM Alliances 
Please send resume to Mercury 
Interactive Corporation with cover 
letter to Human Resource Dept. fax: 
408-822-5514, jobs@merc-int.com 
or mail your resume to 1325 
Borregas Avenue, Sunnyvale, CA 
94089. Mercury interactive 
Corporation is an equal employ’ 
Opportunity employer committed 
to the develop of a diverse 
workforce 


Engineers 
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MERCURY INTERACTIVE 


Seeking qualified applicants for 
the following positions in 
Memphis/Collierville, TN: Sen- 
ior Programmer Analyst. For- 
mulate/define functional req- 
uirements and documentation 
based on accepted user criteria 
Requirements: Bachelor's deg- 
ree or equivalent in computer 
science, MIS, engineering 
related field plus 5 ye 
experience in systems/applica- 
tions development. Experience 
with object-oriented program- 
ming languages, application 
server technologies and a Java 
Messaging System also 
required. “Kh er's degree in 
appropriate field will offset 2 

f general experience 

mes to Sibi George 

Corporate Services 
1900 Summit Tower Bivd., Suite 
1400, Orlando, FL 32810. EOE 
M/F/D/V 


Equity Finance Dvipr wanted by 
Comp Systs ¢ ting Co in 
Manh. Desig mpiement & 
maintain back office systs, creat- 
ing new modules for Swaps 
funds & equitie ovide tech 
solutions for tradi ysts; quant 
dvipmnt & dep ent work 
dvip analytics for mkt systs 
algorithmic trading & real time 
risk. Bach in Info Systs or Comp 
Sci & 2yrs exp in job offered req 
Respond to: SC/HR Dpt, PO 


Box 4241, GCS, NY 10163. 


Vignette Content Man- 
agement Seeking 
Vignette developer with 
strong Java skills and 
experience creating De- 
tailed Design Docu- 
ments for Vignette. 
Submit resume and ref- 
erences to Trac USA 27 
World's Fair Drive 
Somerset New Jersey 
08873 


InfoWorld 





Network World 
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Get Ahead In Your Career! 


Meet Face-To-Face With Leading Employers At The... 


C 


EER FAIR 


CHICAGO, 


Mownoay, January 19, 2004 « ae Pizr 
WASHINGTON, DC 


Monoay, January 19, 2004 ¢ McLean Hiuton Hote 


GREENBELT, MD 


Weonespay, January 21, 2004 @ Martins Crosswinos 


LOS ANGELES, CA 


Weowespay, January 21, 2004 © Ranisson Hote: at LAX 


Exhibit Hours for All Events: 11:30am - 4:30pm ¢ Free Admission 
Employers - To exhibit, please call Gloriann Clark at 310-309-4409 
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Systems Developer & Team 
Leader Philly-area specialty 
work management solutions 
developer seeks a Systems 
Developer and a Team Leader 
to dev. intranet-internet based 
tools for mgmt. of complex sci- 
entifc projects. Use RAID archi- 
tecture, ASP, XSL-, SML-, CSS 
Javascript, COM+, EAP-like 
SAP R/3, Visual Interdev, Visual 
Source Safe, XML Spy, SQL 
Server, Crystal Reports, Remote 
Scripting & UML in development 
process, inci. syst. doc. Both 
pos. require BS or equiv. in 
Comp. Sci or EE w/computer 
emphasis, Team Leader pos 
require 3 yr exp in same/similar 
pos., Syst. Dev. position req. 2 

in same/similar position. Fax 
resume ATTN: NK, Project by 
Web, 610-668-2157. No phone 
Calls, principals only, on cover 
indicate which pos. you are 
applying for. Must be authorized 
to work in US for any employer. 


Lead Java Developer (1) & Java 
developer (2 positions) in 
Bethlehem, PA 


Responsibie for programming 
design and development using 
Java 2, J2EE, JSP. Serviets 
HTML, Win2000/XP, IBM HTTP 
Server, Apache Server, SOAP. 
XML/XSL, Swing, MS SQL 
Server. IBM WebSphere 
Borland Jbuilder, and Firepond 
Sales Performer Configurator 
(SPC) v10. Competitive salary. 
40 hr. week, bachelors degree 
three years experience 
for all positions 
six months project 
management experience for 
Lead Developer. Submit 
resume and cover ietter (no 
phone cails) to Intelliquip, LLC. 
1480 Valley Center Parkway 
Bethlehem, PA 18017 


We have 
(nationwide) f 

with In try E ous sk 

combin reqd) in SCADA 
GE XA 21 system Arch, VIN 

tor Design Patter 

Studio MAX, Core’ 

Xpress, Natura 

Assembler, EARL, ED! ABAP/4 
Python, Java with DB2 

Syb as, Ne 

COM+ ATM 

CORBA V Ss 


ury 


RFP/RFQ/RF 
Some position 


require BS 

the above with 
Foreign educ 
bination 

Trave 

Resum 

to Dire: 


Programme 

eers & Oraci 

Design, develop, test apps in 
J2EE, Versata Logic Suite 
workflow engine in DB2 & 
Websphere on Unix from SAP 
and other legacy apps. migra- 
tion; Oracle/Apps. 11i & rel 
tools, RMAN, SQL Server 
Admin., Clarify, Oracle Financial 
Apps., Sheil Scripts, Silver- 
stream, Weblogic, Apache in 
various OS. Travel to Client 
Sites reqd. Prevailing wage. 
Mail resume to: HR, 2415 San 
Ramon Valley Bivd., Suite 4140 
San Ramon, CA 94583. EOE 


December 22, 2003 


HR, RS 
1900 McCarthy 
3 Milpitas, CA 95035 


IT Manager 

Analyze company's 

ments & procedures in account- 
ing operations & design, devel 
op & odify ompany's 


jaccounting software systems to 


meet its Supervise 
employees who use the sys- 
tems. Req'd Bach. Deg. in 
Accounting or Finance, 2yrs 
exp in the job offered or in a 
business applications occup., & 
exp with & certification in Great 
Plains (Microsoft Business 
Solution). Resume to: Takara 
Beimont USA, Inc., 101 Belmont 
Dr., Somerset, NJ 08873-1204 
Attn: R. DiPiazza 





Manager, E-Commerce and 
Web Development 


Sennheiser Electronic Corp- 
oration has an opening in its Old 
Lyme, Connecticut office for a 
Manager, E-Commerce and 
Web Development 


Conceptualizes and creates the 
marketing, media and business 
content to be placed on the com- 
pany's website. Localizes exist 
ing German websites and online 
applications including their con- 
ventions and nomenciature to 
be suitable for the local U.S 
market. Organizes editorial revi- 
sions of foreign language 
(German) electro-acoustic prod- 
uct information, press releases 
and promotional content to be 
published on the company's 
U.S. website. Forecasts and 
analyzes marketing, finance and 
other electro-acoustic industry 
related business conditions 
affecting current and future mar- 
keting policies. Analyzes, devel- 
ops and implements web based 
marketing and media content to 
improve marketing strategies 
and promotional programs. 


Must posses at least a bache- 
lor's degree or its equivalent in 
Economics, Marketing or a relat- 
ed field and relevant work expe- 
rience, including experience in 
field of Content Migration and 
Localization of foreign language 
German/English) Internet App- 
lications and technical ability to 
maintain, manage and develop 
corporate Internet resources 
such as web, mail, ftp servers 
and content management sys- 
tems. 


Resume and/or cover letter 
must reflect each requirement 
above and specify reference 
code MEWD/MGA or it will be 
rejected 


Forward resume to HR 
Department, Sennheiser Elect- 
ronic Corporation One 
Enterprise Drive, Old Lyme, CT 
06371 


Technical Analyst: Design 
Configure voice networks using 
Siemens Switches (hecom & 
hipath) & Data networks using 
Cisco routers, switches & fire 
wall for new property mgmt bidg 
Service & Support existing prop- 
erties; Customize new applica- 
tions per requirement of multi- 
tenant bidg.; Create new appli- 
cation software (using Java 
XML, Visual Basic, C++) to inter- 
face customized application with 
Telecom hardware & software 
equip. Req.: B.S. Degree or 
Equiv in Acctg. or Comp Sci & 2 
yrs relevant exp., or will accept 3 
yrs univ. studies in Acctg. or 
Comp Sci., & 3 yrs relevant exp 
in lieu of B.S. plus 2 yrs exp. 
Relevant experience must incidg 
core duties & technologies 
described above. 40 Hrs/Wk 
Competitive Salary. Must have 
proof of legal authority to work in 
USA. Send resume to: K 
Hutchinson, MSI Properties, 164 
Main Street, Dubuque, IA 52001 


SENIO SOFTWARE ENGI- 
NEER to design, develop, test. 
maintain and implement web- 
based application software 
using Java, ATG Dynamo, DCS. 
DAS, Oracle, JSP and Java 
Script under Sun Solaris operat- 
ing system; Supervise and men- 
tor junior programmers and 
engineers. Require: B.S. degree 
in Computer Science, an 
Engineering discipline, or a 
closely related field with 5 yrs of 
exp in the job offered 
Competitive salary offered 
Apply by resume to: Dave 
Bloomquist, Global! Software 
Development Services, Inc.,10 
South 5th St, Ste. 700, 
Minneapolis, MN 55402; Attn 
Job DS 


IT|careers 


PROJECT MANAGER to super- 
vise and lead a team in the 
design, development, imple- 
mentation and support of Supply 
Chain and Enterprise 
Application Integration systems 
using Tibco, BizTalk, Viewlocity 
CAPS Logistics, SAP, JD 
Edwards, EJB, Serviets, JSP. 
MQSeries, Web Methods, J2EE 
Java, under SUN Solaris, UNIX 
Linux, and Windows NT/2000 
operating systems; determine 
best methods to fill technology 
gaps within individual business 
process models and define the 
strategy behind protocols (http. 
SOAP, Web Services), payload 
standards (EDI, ebXML, XML 
BPML) and next generation sup- 
ply chain architecture; define 
and develop baseline project 
plans; supervise and mentor 
technical implementation profes- 
sionals. Require: M.S. degree 
in Computer Science, an 
Engineering discipline a 
closely related field, with two 
years of experience in the job 
offered or in the related occu 
tion of Software Consultant 
Extensive travel on assi 

to various client sites within the 
U.S. is required. Competitive 
Salary Offered. Send resume 
to: Vishy Dasari 
Technologies. 

Perimeter Center Wi 

E104, Atlanta, GA 30338. Attn 
Job AT. 


JRD Systems Inc., has multiple 
openings available for IT profes- 
sionals including software engi- 
neers, consultants, programmer 
analysts, project leaders/man- 
agers account managers. 
Database Administrators, sys- 
tems/management analysts. 
web masters/designers & pro- 
ject engineers. Some positions 
req Bachelor's Degree (or 
equiv.) while others require 
Master's Degree (or equiv.) in 
C.S., Eng'g, info Systems, Math 
Bus Admin or related field. We 
will accept the foreign equiv. of 
the required education and/or its 
equiv. in edu. & exp. Exp 
required will depend on the posi- 
tion. Travel on some assign- 
ments to various client sites 
within the U.S is required. Send 
resume to HR, JRD Systems. 
42524 Hayes Rd, Suite # 100 
Clinton Twp, M! 48038. 


SOFTWARE ENGINEER to 
design, develop, test, maintain, 
implement and support web- 
based application software in a 
client/server environment using 
ASP.NET, VB.NET, C#, Java, 
JSP, VB, ASP, SQL Server. 
Oracle, JavaScript, VBScript, 
COM+, SOAP, Web Services 
Cobol, DB2 and CICS on 
Windows platform. Require 
M.S. degree in Computer 
Science, an Engineering disci- 
pline, or a closely related disci- 
pline with 2 yrs of exp in the job 
offered. Extensive travel on 
assignment to various client 
sites within the U.S. is required 
Competitive salary offered 
Apply by resume to 
Kandimalla, President 
Computers Inc 

Roswell Lakes Parkway, Suite 
300, Roswell, GA 30076: Attn 
Job YS. 


International Programming & 
Systems, Inc. has various opps 
for Analysts/Programmers with 
the following skills: Visual Basic 
6.0; Visual C++; C#; Javascript; 
VBScript; ASP; SQL Server 
HUON, Oracle HRMS; Oracle 
Apps 11i; MQ Series; MQSI 
Oblix Identity Mgmt; Corillian 
Voyager. Positions are nation- 
wide inc. Seattle, WA, NJ and 
CA. IPS also has Sales and 
Recruiting positions in our S.F. 
office. Electronic responses are 
encouraged, cflavell@ipsameri- 
ca.com or mail resume to IPS, 
1875 So. Grant Street, #300, 
San Mateo, CA 94402 (Fax) 
650-572-8679. Principals only 
please 


Software Engineer-Develop, 
create modify computer 
sysUapps software & specialized 
utility programs. Analyze, design 
databases within an application 
area. Analyze user needs 
develop software solutions using 
Enterprise Resource Planning 
(ERP) & related software 
Bachelor's degree or foreign 
equiv. Will accept 3 yrs under- 
graduate study & 3 yrs exp as 
computer professional in lieu of 
Bachelor's degree. Degree must 
be in CS/CA, Eng., Chem 

Math, Physics, or scientific/busi- 
ness field. Must have | yr exp 
using SAP, BAAN, PeopleSoft 
Oracle Applications/ Financials. 
Manufacturing/HR. Extensive 
travel frequent relocation 
required. $65K/year, 40 hrs/wk 
EEO/AAP/M/F/V/H Submit 
resumes to Site Director 
Pittsburgh/ Allegheny County 
CareerLink, ATTN: CL Program 
Supervisor, 425 6th Ave, Suite 
2200, Pittsburgh, PA 15219- 
1837 Job Order No WEB379183 


Software Engineer-Develop. 
create, modify computer syst/ 
apps software & specialized util- 
ity programs. Analyze, design 
databases within an application 
area. Analyze user needs 
develop software solutions using 
Relational Database Manage- 
ment Systems (RDBMS) & relat- 
ed software. Bachelor's degree 
or foreign equiv. Will accept 3 
yrs undergraduate study & 3 yrs 
exp as computer professional ii 
lieu of Bachelor's degree 
Degree must be in CS/CA, Eng 
Chem., Math, Physics or scien- 
tific/business field. Must have | 
yr exp using Informix, Oracle 
FoxPro, Sybase, SQL Server or 
Progress. Extensive travel, fre 
quent relocation required 
$65K/yr 40 hrs/wk. EEO/AAP, 
M/F/V/H Submit resumes to Site 
Administrator, Greene County 
CareerLink, 4 W High St 
Waynesburg, PA 15370-1324 
Job Order No WEB379167 


APPLICATION 
SOFTWARE ENGINEER 


A well-established company in 
California has immediate open- 
ing. Design, write, test & sup- 
port complex software programs 
using Peoplesoft ERP & reiated 
software. Analyze &design sys- 
tems/applications Extensive 
programming/debugging/testing 
of systems & applications 
Make changes to Peoplesoft 
Internet app. using Peopletools 
& SQL BA/BS Computer 
Science or related curriculum. 
Min. 3 yrs related exp. as 
Software Eng. using Peoplesoft 
ERP. Proficient in Peopletools. 
SQL/SQR/ PeopleCode/ App 
Engine,/App Designer. Familiar 
with Query, Nvision, Excel & 
Excel Macros. Send resume 
HR/IT Dept., PO Box 1230, 
Stockton, CA 95201-1230, Fax 
(209) 466-2604 e-mail 
sdrew@duraflame.com EOE 


Software engineer to design 
develop and test computer pro- 
grams for business applications 
analyze software requirements 
to determine feasibility of 
design; direct software system 
testing procedures using exper- 
tise in WebLogic, Oracle, HTML 
ATG and Erwin. Requirements 
Bachelor's Degree, educational 
or functional equivalent, in 
Computer Science or related 
field and two years experience 
as a software engineer or com- 
puter programmer, knowledge of 
WebLogic, Oracle, HTML, ATG 
and Erwin. Salary: $66,000/ 

Working Conditions: 8:00 

to 5:00 PM 40 
hours/week, involves extensive 
travel and frequent relocation 
Apply: Site Manager, Armstrong 
County Career Link, 1270 North 
Water Street, PO Box 759 
Kittanning, PA 16201, Job No 
WEB3801128. 


Maeetactesemeceyae) 


Electronic Commerce Man- 
ager for Hughes Supply, Inc.: 
Manage through other manager- 
ial personnel the operations of 
lectronic Commerce within the 
Systems Development and 
Integration Dept., implement E 
Commerce projects, work with 
vendors, and customers to 
determine E. Commerce req- 
uirements and strategy 
Bachelor's Degree in MIS or 
equivalent, plus four years of 
experience as senior program- 
mer analyst Knowledge of 
wholesale distribution and sup- 
ply chain software, PICK 
Universe, Java/J2EE, EDI, XML 
and web development including 
HTML and Visual Basic/ASP 
required Competitive salary. 
No job contractors 


Send resume to 


Hughes Supply 
Director of Systems 
Development & Integration 
1 Hughes Way 
Orlando, Florida 32805 


Software Engineer-Develop 
create. modify computer 
sysVapps software & specialized 
utility programs. Analyze, design 
databases within an application 
area. Analyze user needs 
develop software solutions using 
Internet Applications & Internet 
Software. Bachelor's degree or 
foreign equiv Will accept 3 yrs 
undergraduate study & 3 yrs exp 
as a computer professional in 
lieu of Bachelor's degree 
Degree must be in CS/CA, Eng 

Chem., Math, Physics, or scien- 
tific/business field. Must have 1 
yr exp. using 2 of A & 1 of B, or 
2 of A & | of C: A) ASP, HTML 
CCGI, PERL, MTS, IIS B) JAVA 
JAVASCRIPT, JAVABEANS C) 
COLDFUSION, BROADVISION 
ATG DYNAMO, NET DYNAM- 
ICS, WEBSPHERE, FRONT 
PAGE. Extensive travel, fre- 
quent relocation required 
$65K/yr 40 hrs/wk. EEO/AAP/ 
M/F/V/H Submit resumes to Site 
Manager, Armstrong County 
CareerLink, 1270 N. Water St 
PO Box 759, Kittanning, PA 
16201-0759 Job Order No 
WEB379181 


tar tat A Lo) 
Hosting ‘Infrastructure 


> has an Engineer — Web 
ng Infrastructure position 
ble in Newark, Delaware. 
Design architecting/engineering 
solutions for an Intranet & 
Extranet environment including 
PERL & UNIX Scripts, Sun 
Solaris OS, Networking, DNS & 
TCP/IP, Remote Acc 
Solutions, GLOG GC3 Application 
Software, JRUN Application 
Server software, LDAP 24x7 on. 
rotatior averages 20 after 
$ calls/month working on 
ation issues. Requires 3 
equivalent & relevant experience 
Submit cover letter & resume to 
CSC, HR, 400 Commerce Drive 
M/S 1SB6, Newark, DE 19713. 
Reference job code BP052705 ir 


cover letter 


pg 
an eo Lee 


Applics. Ntwrk Consulting 
Engr Framingham MA 
Architect & support IT infrastruc- 
tures to prevent error recur- 
rences of client's ntwrk 
Integrate globai sol'n into local 
envrnmt. Determine failures & 
resolve remotely & effectively 
meeting customer's SLA's 
Collaborate w/multi-vendor 
Level3 resources to diagnose & 
resolve tech. faults. Work with 
CISCO routers and switches 
CPE eqpmt, UNIX, IBM Centric 
ntwrks, Commercial Packet 
Sniffers. REQUIRES: Bach's (or! 
equiv educ & exp) in CS or EE 
plus 3 yrs exp in job offd or as 
Sr. Ntwrk Engr. Cisco CCIE 
Exp., which may be concurrent, 
must incld. 3 yrs exp. each 
w/UNIX, IBM  Ntwrks 
Security Mail resumes 
D.Schofield DiData, 
Newbury Rd., Framingham, MA 
01701 
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SOFTWARE ENGINEER to 
design, develop, implement and 
maintain complex web_based 
e_commerce and enterprise 
application integration applica- 
tions software in a client/server 
environment using Object orient- 
ed __ technologies. Rational 
Unified Process, UML, C++, 
Java, J2EE, EJB, Serviets, JSP, 
JFC/SWING, JMS, WebLogic, 
WebLogic Integration, Corba, 
XML/XSLT, SQL/PLSQL, Rat- 
ional Rose, and Oracle under 
SUN Solaris, UNIX, Linux, and 
Windows NT/2000 operating 
sysiems. Require: B.S. degree 
in Computer Science, an 
Engineering discipline, or a 
closely related field, with three 
years of experience in the job 
offered or as a Programmer 
Analyst. Extensive travel on 
assignment to various client 
sites within the U.S. is required 
Competitive Salary Offered 
8:00 am to 5:00 pm, M-F. Send 
resume to: Vishy Dasari 
President, Objectnet Tech- 
nologies, Inc., 1117 Perimeter 
Center West, Suite E104, 
Atlanta, GA 30338. Attn: Job AP. 


SOFTWARE ENGINEER to 
design, develop and test 
embedded state machine closed 
loop contro! system, Boot- 
loaders, Chip level Drivers and 
Real Time Operations System 
(RTOS) software for microcon- 
troller based DC & AC Motor 
Controllers using C and Asse- 
mbly; Implement and design 
software for SPI, 12C and RS232 
based applications; Implement 
serial and parallel data transfer 
techniques and perform integri- 
ty checks. Require: B.S. degree 
in Computer Science, an 
Engineering discipline, or a 
closely related field with 1 yr of 
exp in the job offered 
Competitive salary offered 
Send resume to: HR, Curtis 
PMC, 235 East Airway Bivd., 
Livermore, CA 94551; Attn: Job 
RP. 


Software Engineer-Develop, 
create modify computer 
syst/apps software & specialized 
utility programs. Analyze, design 
databases within an application 
area.Analyze user needs, devel- 
op software solutions using 
Siebel & related software 
Bachelor's degree or foreign 
equiv. Will accept 3 yrs under- 
graduate study & 3 yrs exp as 
computer professional! in lieu of! 
Bachelor's degree. Degree must 
be in CS/CA, Eng., Chem., 
Math, Physics or scientific/busi- 
ness field. Must have 1 yr. exp 
using Siebel CRM & related soft- 
ware. Extensive travel, frequent 
relocation required. $65K/yr 40 
hrs/wk EEO/AAP/M/F/V/H 
Submit resumes to Fayette 
County CareerLink, ATTN 
CareerLink Program Supervisor, 
135 Waylan Smith Dr, 
Uniontown, PA 15401 Job Order 
No. WEB379171 


Software engineer to design 
develop and test computer pro- 
grams for business applications. 
analyze software requirements 
to determine feasibility of, 
design; direct software system 
testing procedures using exper- 
tise in Semaphores, Mutexes, 
Informix and Tuxedo. Req- 
uirements: Bachelor's Degree or 
equivalent in Computer Science 
or related field and two years 
experience as a software engi- 
neer or computer programmer, 
knowledge of Semaphores 
Mutexes, Informix and Tuxedo 
Salary: $66,000/year. Working 
Conditions: 8:00 A.M. to 5:00 
P.M., 40 hours/week, involves 
extensive trave! and frequent 
relocation Apply Fayette 
County CareerLink Attn 
CareerLink Program Supervisor, 
135 Waylan Smith Drive, 
Uniontown, PA 15401, Job No. 
WEB380107 
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Offshore Lal Labor 


Similar bills lle resting restricting gov- 


ernment offshore work are un- | 
| ditional money 
| been paid just $930,000. Nei- 

| tzel said it’s to the firm’s cred- 


der consideration in New Jer- 
sey, Michigan, North Carolina 
and Indiana. Indiana made 
headlines recently when a 


state jobs agency signed a deal | 


that could have brought in In- 
dian coders [QuickLink 
42838]. 

Tom Neitzel, the health care 
agency’s IT manager, said that 
while he’s aware of the politi- 
cal implications of the bid 
award, his agency has to make 
decisions based on a project’s 
business case, not on where 
the work is performed. “There 
are very emotional issues as- 
sociated with offshore con- 
tracting,” he said. 

The winning bid of approxi- 
mately $3 million by Health- 
axis Inc. — the Irving, Texas- 
based prime contractor that 
has been working with India- 
based outsourcer Satyam 
Computer Services Ltd. — was 
the only bid to come in under 
the $3.6 million budget set by 
the legislature for building a 
new insurance benefits ad- 
ministration system. Written 
proposals were received from 
PeopleSoft Inc., Oracle Corp. 
and Physmark Inc., and De- 
loitte Touche Tohmatsu. 

The savings came chiefly 
from reduced salary costs, said 
Neitzel. For instance, Health- 
axis listed per-hour rates for 
programmers at $34; other bid- 
ders’ rates started at $178. 

The contract, which was set 
at about $2.6 million after the 
state agency decided to take 
responsibility for purchasing 
the systems hardware, was 
signed in May 2002 with the 
expectation that the system 
would be in place by the end 
of June 2003. That deadline 
has been moved to next June. 

But the delay is costing the 
agency about $1.4 million in 
maintenance and support 
costs for running its health 
benefits applications on a sys- 
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tem hosted by another state 
agency, said Neitze!. That’s 
money the Washington State 
Health Care Authority didn’t 


expect to be paying. 


Healthaxis isn’t seeking ad- 
y and has so far 


it that it’s sticking with its 
contracted cost. 
The project’s problems were 


| revealed last week by the Seat- 
| tle-based Washington Alliance 
| of Technology Workers, which 
obtained state documents 

| about the project and posted a 


detailed account about it on its 


| Web site [QuickLink a3910]. 


The documents list prob- 


| lems with testing and design 


quality, as well as usability. In 
interviews, both sides cited is- 
sues with the project’s re- 
quirements that may not have 
been evident at the outset. 
“This project was more than 


| what both parties had antici- 


pated,” said Neitzel. 
“This has been a large, com- 


Researcher Says 


4 | could have 
had the same 
thing happening if 
everybody had been 
based in Dallas. 


eeeresccses 


TOM NEITZEL, |T MANAGER, WASH- 


plex project,” echoed Emry Sis- 


son, executive vice president of | 
| technology and operations at 


Healthaxis, who noted that this 


| is his company’s first project 


for a state government. “We 
maintain a good relationship 
with the state, and we are com- 


| mitted to delivering and meet- 


ing their systems needs. We re- 


| main convinced that we will be 


able to deliver the system 
Although Neitzel doesn’t 
blame offshore workers for 
the delay, he said there have 
been problems. While the 
workers have technical skills, 


| they don’t have insurance sub- 


ject-matter expertise, he said. 


Offshore Moves 


Don’t Lead to Big U.S. Job Losses 


The number of U.S. IT workers 
losing their jobs because of off- 
shore outsourcing is a topic that's 
open for debate. For example, a 
researcher at Boston University 
last week claimed that most tech 
staffers whose jobs get moved 
offshore are being redeployed in 
new positions. 

Nitin Joglekar, an assistant 
professor of operations and tech- 
nology management at BU’s 
School of Management, estimat- 
ed that 15% to 20% of IT work- 
ers typically are dismissed when 
their positions are sent overseas 
But the remainder are given other 
responsibilities, said Joglekar, 
who has examined the impact of 
offshore outsourcing at large 
companies such as FleetBoston 
Financial Corp. 

In some cases, programmers 
have become project managers 
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or been put in charge of manag- 
ing the relationships with offshore 
providers, Joglekar said. “Those 
people that were doing coding 
before are probably doing much 
more business analysis now,” he 
said. 


Different Findings 
But Joglekar’s findings are based 
on in-depth statistical analyses of 
just tive companies, plus anecdo- 
tal information from about 15 oth- 
ers. They differ markedly from 
predictions made last summer by 
Gartner Inc., which said it expect- 
ed that one out of every 20 cor- 
porate IT jobs in the U.S. would 
be moved crsnore by 2005 and 
that less than 40% of the affect- 
ed workers would be redeployed 
by their current employers [Quick- 
Link 40344]. 

DFS Group Ltd., a San Francis- 
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And that has affected testing. 
Satyam spokesman Abhijit 


| Roy said the company has suf- 


ficient experience and has 
“time and again demonstrated 


| its business knowledge. 


“Understanding unique and 


| business-specific require- 
| ments on a project of this 


INGTON STATE HEALTH CARE AUTHORITY | magnitude is not something 


that would be different for off- 
shore vs. onshore technical 
personnel,” said Roy. 

But Stan Lepeak, an analyst 


| at Stamford, Conn.-based 
| Meta Group Inc., said concern 


about the business knowledge 


| of offshore companies is a 


common complaint, especially 


| as offshore firms increasingly 


take on more complex proj- 


| ects. Gaining that business 
| knowledge “ 
| lenge for them” 
| to more acquisitions — both 

| in the U.S. and among overseas 


is a major chal- 
and may lead 


companies — as they seek to 


| add depth to their skills. 


Asked what he’s learned 


| from the project, Neitzel said, 


co-based company that operates 
400 duty-free retail shops at air- 
ports and other sites worldwide, 
sends some of its IT work over- 
seas under a combined on- 
shore/offshore IT services con- 
tract with Cognizant Technology 
Solutions Corp. in Teaneck, N.J. 

ClO Ron Glickman wouldn't 
say how many IT workers DFS 
has let go or redeployed as a re- 
sult of its deal with Cognizant. 
But shifting peopie into new jobs 
isn’t always a good fit for employ- 
ers or the workers themselves, he 
said. 

“I do agree that some people 
have been repositioned to other 
activities in the companies that 
take advantage of global sourc- 
ing,” he said. “However, my per- 
sonal experience has been that 
the aptitudes and expertise re- 
quired to move from one role to 
another are often different enough 
that training will not enable the 
impacted individuals to excel or 
be satisfied in their new roles.” 


| based in Dallas,” 


“I would be certain that clear 
requirements, written require- 
ments, are developed and 
agreed upon. Make sure that 
clear deliverable dates are 
documented and agreed upon 
by all. Assume nothing. That 
is what I am learning here, and 
it is being reinforced.” 

As for the effects of out- 
sourcing the project, “I could 
have had the same thing hap- 
pening if everybody had been 
Neitzel said. 


| don’t think 


G3 that Wash- 


ington state tax 
dollars should be 
used to create jobs 
overseas, when 
we've got skilled 
workers here. 
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Dennis S. Callahan, CiO at 
Guardian Life Insurance Co. of 
America, said the New York- 
based insurer also farms out 
some IT activities to companies 
with offshore operations. But only 
about 5% of its 400-person IT 
staff has been directly affected, 
according to Callahan. 

“We've done offshoring, but in 
a way that’s minimized the staff 
impact,” he said, noting that U.S.- 
based Guardian employees make 
up half of the cornpany's develop- 
ment team. Callahan said Guard- 
ian works collaboratively with its 
IT services partners and distrib- 
utes development work across 
different geographic regions. 

Andrew Efstathiou, an analyst 
at The Yankee Group in Boston, 
said Joglekar's job-loss estimates 
map with what he's seeing. But 
he added that it’s unclear how 
many workers have been able to 
make immediate transitions to 
new roles at their companies. 

- Thomas Hoffman 
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2004: It’s TT’s Turn 


EADY FOR 2004? It was supposed to be the year IT 
would come roaring back after the turnaround of ’03. 
Trouble is, things didn’t turn quite the way we expect- 
ed. The recession turned out to be tougher than anyone 
thought. Outsourcing turned lots of corporate IT shops 
inside out. And new government regulations turned into the biggest 
corporate headache since Y2k — and this time, IT is cleaning up a 
mess it didn’t make. But what’s most likely to give you grief in the 
coming year is IT-shop staffing, as you take your turn in an industry- 


wide game of musical chairs. 

No, there’ll be no mass exodus of IT employ- 
ees who just want a change. Tight budgets and 
outsourced jobs that aren’t coming back mean 
most people in your IT shop will have to hang 
tough. But be prepared for raids on your IT 


staffers who have specialized skills — financial, 
security and grid-computing experience will be 


hot. Then be prepared to do some raiding of 
your own to fill empty seats. Hot talent will 
keep turning over as the economy improves. 
Will U.S. IT shops turn against offshore out- 
sourcing in 2004? Not likely; offshorers will 
keep getting better and continue to cut better 
deals. But we have enough experience now to 
spot which projects do and don’t make out- 
sourcing sense. And as companies start focus- 
ing on revenue growth instead of just cost-cut- 
ting, many critical projects will stay in-house. 
New government regulations and security 
will become mirror images of each other: 
They’ll both cost you a bundle, and neglecting 
either could put your company out of business. 
Maybe you can’t show returns on investment 
on regulatory- 
but at least watch for chances to make real im- 
provements, not just quick fixes. 
And radio frequency identifica- 
tion — the notorious RFID — will 
turn out to be a lot more trouble 
than early adopters like Wal-Mart 
and the Defense Department ex- 
pect. Scanning RFID chips takes 
time and also requires extra space 
in warehouses and on loading 
docks, along with all the necessary 
IT resources. The payoff in better 


and security-mandated projects, 


fading memories. No, it won’t be that easy. 
Our enterprise applications aren’t designed 
for utility-style flexibility; if they were, we 
wouldn’t have capacity headaches. 

Will any long-promised technologies turn 
into big winners in the year to come? Not voice 
over IP, which still requires too many network 
upgrades — along with a tough learning curve 
in IP telephony — to hit the big time just yet. 
Remember, users will put up with network out- 
ages that delay e-mail for hours at a time, but 
take away their dial tones for five seconds, and 
they'll be screaming for IT’s collective hide. 

And not tablet PCs — they’re eating the dust 
of laptops, which are taking over corporate 
desktops. No surprise there: IT likes laptops be- 
cause they’re easier to lock down, and users 
like them because they make less noise, take up 
less space and don’t suffer from desktop PC 
dowdiness or the tablet PC’s goofiness factor. 
A solid shift to laptops as a desktop standard 
will delay the success of tablets for years, and 
maybe forever. 

Nor will Linux make real inroads on the 
desktop next year: Microsoft’s Windows 
bundling deals will do a better job protecting 

that famous monopoly than iffy 
Linux user interfaces, limited sup- 
plies of business-class Linux appli- 
cations and wild-eyed legal threats 
from SCO combined. 

But one thing should turn a little 
brighter in 2004: corporate IT’s 
reputation. With CEOs under fire 
and corporate governance under a 
cloud, IT’s old spendthrift rep 
doesn’t seem so bad now. And if we 
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Sometimes 12 Is Enough 

During a period of frequent brownouts, this hospital in 
Manila uses a set of car batteries wired together for 
server backup power. Be careful, IT pilot fish warns a 
tech who comes to work on the system; they can sup- 
ply 50 amps for an hour. But the tech isn’t impressed 
- it's just 12 volts, he laughs. “Minutes later, there 
was a loud noise, a big flash and a ‘Yeow/" The tech 
emerged, open-mouthed and sweating ~ and holding 
é wrench that was virtually vaporized,” fish reports. 
“No nurse was called, by the way, but a glass of cold 
water helped slow down his heartbeat.” 


Here? Nat : 


This company’s corpo- 
rate standards require 
that every system have 
an off-site backup in 
case of catastrophe. But : 
one project doesn't seem : 
to have one. Where is it? : 
asks pilot fish reviewing: 
the project. “We don’t 
have that. No one asked 
for it,” she’s told. “We 
ee 


"That Explains it 
} This clerk is proud of his 
: which looks like it’s ac- 
tually part of his touch- 
: he’s transferred to a dif- 
: ferent department, he 
: leaves it behind - but 
: then discovers that he 
: has the same kind of ter- 
: minal and that he misses 
? his old spike. So one day 
: he arrives early and re- 
: claims the spike from his 
: old terminal. “That day, 
? | arrived at work to learn 
: frame would be off-line 
: for about an hour,” 
; Says an IT pilot fish 
: working there. “I also 
: got a panicked call from 
: the clerk’s replacement. 
; She couldn’t log into 
: the system, and she 
knew what ine yn oblem 
_ was: Someone had bro- 
ken off the antenna on 
_ har computer and it 
: couldn't connect.” 
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FEED THE SHARK Send your tre tales of life to 


inventory control may take years to 
show up. 

Utility computing advocates will 
spend the next year promising to 
turn your capacity headaches into 


‘sharky@computerworld.com. You snag a snazzy 
me Suton out ation 
eee 
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FRANK HAYES, Computer- 
world's senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


can keep costs under control and 
deliver projects that meet business 
needs, in 2004 it will finally be IT’s 
turn to shine once again. @ 43394 
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Nominate your company 
for Computerworld’s Best 
Places t Work in IT 2004. 





COMPUTERWORLD 


Mt 


BEST PLACES 


TO WORK IN IT 2004 


If your IT department offers 
great benefits, competitive 
salaries, opportunities for 
training and advancement, 
and access to interesting proj- 
ects, then get your company 
recognized! Computerworld 

is conducting its 11th Annual 
Best Places to Work in IT 
survey, and we need your help. 
Our special report will honor 
the top 100 companies that 
offer their IT staffs a challeng- 
ing and satisfying work 
environment. 

THE WINNING COMPANIES WILL BE 
ANNOUNCED IN THE JUNE 14, 2004, 
ISSUE OF COMPUTERWORLD. 


Buyout Bids Rock 
ERP Landscape 


To nominate your company, go to www.computerworid.com/bpnominations. 
The deadline for all nominations is Wednesday, December 31, 2003, at 5 p.m. EDT. 


For more information, go to www.computerworld.com/services/research/bestplaces 
or send e-mail to bestplaces@computerworld.com. 





Better Performance. Better Price. 


The smartest way to run your network 
is also the smartest way to run your business. 
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Scalable, Affordable Unmanaged Switch 


© 24 Fast Ethernet Ports Plus 1 Copper Gigabit 


$249 E-VALUE Code: 20282-S11.02 


Recommended Upgrade: 


POWERCONNECT™ 5212* SWITCH 
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Stackable, Enterprise Class Managed Switch 


st Ethernet Ports Plus 2 Built-in ( 


© 3-Yr Next Busine 


$ ow as $26/mo., (46 pmts:*) 
E-VALUE Code: 20282-11209 


Recommended ee 


POWERCONNECT™ 5224* SWITCH 
High-Performance All-Gigabit Managed Switch 
© 24 Copper Gigabit Ports Plus 4 SFP Fiber Uplinks 


© Adv é a Browser c 


Yr Next Busines: Day Adv anced Exchange Se 


: ow as $54/m its 
E. VALUE Code: a. s1i219 


Recommended _ 


yur Response 24x7 Advanced Exchange 


It's a Dell, so you know you're going to save money. But let's talk performance. From 
standard Fast Ethernet to high-speed Gigabit Ethernet over copper or fiber, Dell PowerConnect 
switches are designed to offer full wire-speed and non-blocking performance. Recent Tolly lab 
tests confirmed that the Dell PowerConnect 3348 outperformed industry leaders by as much as 
48%. Plus, PowerConnect switches are highly interoperable, scalable and perfect for building 
a first-time network or expanding an existing one. So bring Dell’s cost-saving, one-of-a-kind 


performance to your LAN and start playing on a field where the advantage is yours 


Dell PowerConnect 3348 Outperforms the Cisco Catalyst 2950 by 48% and [TOLLY] 


3COM SuperStack 3 Switch 4400 by 30% in Layer 2 Throughput Tests ey 
y p Re t #203116 — September 2003 | | 
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Better network solutions. Easy as DLL 


Click www.dell.com/switch Call 1- 877-312-3355 


GO 


Online For 
Latest Prices 
and Weekly 
Promotions 
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